Forever Security found a 13 KB AGENTS.md planted in Downloads. Codex rewrote its own config and ran the payload. How it works, and a checklist to run now.
A Web Page Dropped AGENTS.md in Downloads. Codex Obeyed It in 90%+ of Tests
Related
Our Agent Gate Blocked Every Bad Change. So Everyone Started Rubber-Stamping It.
We built a gate for agent work. It blocked bad changes beautifully. That was the problem. Nobody read...
Your Agent's Config Is a Dependency With No Lockfile
Your dependency policy is probably decent. Locked versions, hash verification, an SBOM if you're...
47 sealed bids later: my agent was pricing escrow work at 100% of budget
A parser bug priced every bid at the full posted budget on a market where the award rule was never stated. Here is the measurement, the fix, and what is still unknown.