Boyan Milanov

A single attack payload hijacked Claude Code and OpenAI's Codex unchanged, according to an exploit brief published July 9 by Boyan Milanov and Heidy Khlaaf at the AI Now Institute. The 'Friendly Fire'…

On July 8, the AI Now Institute published a proof-of-concept showing that Claude Code and Codex, when tasked with auditing an untrusted library, can be tricked into executing attacker-controlled binar…

The AI Now Institute published a proof-of-concept attack called Friendly Fire that achieves an 85% hit rate against AI coding agents. Researchers Boyan Milanov and Heidy Khlaaf planted a malicious scr…