A single attack payload hijacked Claude Code and OpenAI's Codex unchanged, according to an exploit brief published July 9 by Boyan Milanov and Heidy Khlaaf at the AI Now Institute. The 'Friendly Fire'…
A developer warns that Human-Agent Trust Exploitation (ASI09) is the hardest vulnerability in the OWASP Agentic AI Top 10 because the bug lies in human psychology, not code. Attackers can poison invoi…
Microsoft's July Patch Tuesday set a record with 570 CVEs, including two zero-days under active exploitation. Meanwhile, security researchers published GhostApproval and Friendly Fire, revealing that …
On July 8, the AI Now Institute published a proof-of-concept showing that Claude Code and Codex, when tasked with auditing an untrusted library, can be tricked into executing attacker-controlled binar…
The AI Now Institute published a proof-of-concept attack called Friendly Fire that achieves an 85% hit rate against AI coding agents. Researchers Boyan Milanov and Heidy Khlaaf planted a malicious scr…
A group of AI researchers published a report warning that Europe risks economic and political irrelevance if it fails to compete at the frontier of AI development, with the U.S. government ordering An…
The AI Now Institute published a proof-of-concept on July 8, 2026, showing that autonomous coding agents like Anthropic Claude Code and OpenAI Codex can be manipulated during security review workflows…