A newly discovered vulnerability, dubbed Plugin4Shell, allows attackers to execute remote code with just a single click - or none at all - giving them carte blanche access to sensitive data and assets. This zero-click flaw in AI coding agents highlights the urgent need for updated security measures to prevent devastating supply-chain attacks.
source & further reading
osintsights.com — original article
RatHat Malware Exploits AI to Automate Android Device Control
OpenAI Exposes AI Model Misalignment Cases, Unveils New Tracking Framework
AI Automates Credential Theft, Threatens Identity Security