ASSET Research Group disclosed GhostSplice on August 10, a proof-of-concept that splits a secret-exfiltration request across multiple MCP tool channels to bypass AI coding agent refusals. In controlle…
ASSET Research Group and Sudipta Chattopadhyay published a proof-of-concept attack called Ghostcommit that hides a prompt-injection instruction inside a PNG image, passes AI code review, and later ind…
Researchers at the University of Missouri-Kansas City developed 'Ghostcommit', an attack that hides prompt injection instructions inside PNG images to trick AI code reviewers into approving malicious …
Researchers at ASSET Research Group published a proof-of-concept attack called GhostCommit that exploits coding-agent pipelines by hiding exfiltration instructions inside image files in pull requests.…