Wiz descubrió GhostApproval: un ataque que engaña a asistentes de IA como Claude Code, Cursor y Amazon Q Developer usando symlinks (sí, la vuln de Unix de los 70s).El agente ve un archivo local inofensivo, pero el symlink apunta a /etc/passwd o ~/.ssh/authorized_keys. El diálogo de confirmación muestra la ruta falsa. El usuario aprueba. Game over."The Human-in-the-Loop security model only works if the loop provides accurate information." — Wizhttps://www.securityweek.com/ai-coding-tools-tricked-into-hacking-developer-machine-via-decades-old-technique/#infosec #AI #cybersecurity #GhostApproval
Related
Google Keep is working on new UI that may screw up your muscle memoryThe Google Keep layout may get a shake up.https://w...
Google Keep is working on new UI that may screw up your muscle memoryThe Google Keep layout may get a shake up.https://www.androidauthority.com/google-keep-app-button-changes-36933...
#Germany's Federal Cabinet approves bill on the use of artificial intelligence in migration proceduresThe government has...
#Germany's Federal Cabinet approves bill on the use of artificial intelligence in migration proceduresThe government has approved a law on the use of #AI in asylum cases. Pro #Asyl...
この間アンバサダーのことでバルトさんがシグルドさんとケンカしてました両面MagsafeでType-Cポートが3つという異端。iPadの「ミニPC化」が叶った https://www.gizmodo.jp/article/magsafe_li...
この間アンバサダーのことでバルトさんがシグルドさんとケンカしてました両面MagsafeでType-Cポートが3つという異端。iPadの「ミニPC化」が叶った https://www.gizmodo.jp/article/magsafe_lifehack_tool_mini_pc/#Apple #LLM #news #bot