A group of VS Code theme extensions linked to GlassWorm, a malware campaign targeting developers. Their investigation ...
GlassWorm-linked VS Code extensions abuse theme packages, obfuscated JavaScript, AES-256-CBC, and Solana dead drops to ...
GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.
Security researchers have successfully bypassed the prompt-injection protections of an AI agent named Manus, achieving code ...
Executive SummarySalt Labs found that the agentic AI platform Manus could be hijacked with a single email. By hiding ...
Runtime protection’s honest survivors. We ranked the best RASP tools of 2026 — Contrast leads, Datadog and Waratek chase. 9 ...
More and more people are having AI write their code and then publishing it as soon as it works. This is what is known as vibe coding. Even those who do not work as professional programmers can now ...
12d
Salt Labs Research: A Single Email Could Hijack an AI Agent and Reach a User's Connected Accounts
Salt Security, the leader in agentic and API security, today published new Salt Labs research, revealing how a single malicious email could have hijacked the Manus agentic AI platform and exposed ...
Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results