ASSET Research Group

Researchers at the University of Missouri-Kansas City developed 'Ghostcommit', an attack that hides prompt injection instructions inside PNG images to trick AI code reviewers into approving malicious …

Researchers at ASSET Research Group published a proof-of-concept attack called GhostCommit that exploits coding-agent pipelines by hiding exfiltration instructions inside image files in pull requests.…