Novee Security's Black Hat USA 2026 briefing revealed three distinct vulnerabilities in popular AI coding agents, including Claude Code, Gemini CLI, and OpenAI's Codex. The flaws allow command injecti…
A CVSS 9.9 vulnerability in Cursor, CVE-2026-26268, allows attackers to execute arbitrary code on a developer's machine by cloning a malicious repository, as disclosed by Novee Security. The flaw, whi…
Security researcher Elad Meged of Novee Security demonstrated at Black Hat USA 2026 that a single GitHub issue can trigger remote code execution and exfiltration of API keys and tokens from AI coding …
Security researchers are warning that the code layer wrapping AI models, known as the harness, is becoming a primary attack surface, with exploits requiring no malicious model behavior. Elad Meged, fo…
Black Hat USA 2026 opened in Las Vegas with research showing AI agent security flaws across major platforms. Fifteen research teams presented findings, including a trust-handoff failure affecting Anth…
Elad Meged, a founding engineer at Novee Security, demonstrated that an AI agent can pass every safety check and still leak secrets by running a sequence against three vendors' own repositories in the…