importantSYS.SOURCE: The Hacker News• 2026-07-09T10:45:02+05:30

AI Agents Designed for Malicious Code Detection Vulnerable to 'Friendly Fire' Attacks

#ai security #code vulnerability #malware execution #open source security #automated code review

AI agents designed for malicious code detection, such as Anthropic's Claude Code and OpenAI's Codex, can be exploited through 'Friendly Fire' attacks that trick them into executing hidden malicious payloads embedded in README files. The vulnerability stems from their autonomous operation mode, which lacks sufficient safeguards against deceptive code injection, necessitating workflow changes rather than software patches.

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead.

That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls "Friendly Fire." It works against Anthropic's Claude Code and OpenAI's Codex when either is running in an autonomous mode that approves its own

Read original article

*** END OF TRANSMISSION ***

> OPEN SOURCE ALTERNATIVES FOR DE-BLOATING HARDWARE AND SOFTWARE ECOSYSTEMS > VITAMIN D ASSOCIATION WITH IMPROVED COGNITION IN INDIVIDUALS WITH SLEEP DISTURBANCES AND MILD COGNITIVE IMPAIRMENT > GLM-5.3 OUTPERFORMS LEADING LLMS AT REDUCED COST ACCORDING TO ED-O-METER BENCHMARK > WAYMO'S CUSTOM CHIP ENHANCES ROBOTAXI PERFORMANCE AND EFFICIENCY > ANALYZING SAL KHAN'S LEARNING APPROACH VS. TRADITIONAL TEACHING METHODS > COCONUT OIL-BASED BIOFUEL DEMONSTRATES COMPARABLE THERMAL EFFICIENCY TO KEROSENE IN JET ENGINE TESTING > FLOCK CEO ADVOCATES FOR PRIVACY-SAFETY BALANCE AMID SURVEILLANCE BACKLASH > UNDERSTANDING THE NATURE OF FAILURE IN COMPLEX SYSTEMS > LEGAL COMPLEXITIES OF TRAINING AI MODELS ON COPYRIGHTED BOOKS > AROS OPERATING SYSTEM PORTED TO BARE-METAL RASPBERRY PI FOR AMIGA COMPATIBILITY> OPEN SOURCE ALTERNATIVES FOR DE-BLOATING HARDWARE AND SOFTWARE ECOSYSTEMS > VITAMIN D ASSOCIATION WITH IMPROVED COGNITION IN INDIVIDUALS WITH SLEEP DISTURBANCES AND MILD COGNITIVE IMPAIRMENT > GLM-5.3 OUTPERFORMS LEADING LLMS AT REDUCED COST ACCORDING TO ED-O-METER BENCHMARK > WAYMO'S CUSTOM CHIP ENHANCES ROBOTAXI PERFORMANCE AND EFFICIENCY > ANALYZING SAL KHAN'S LEARNING APPROACH VS. TRADITIONAL TEACHING METHODS > COCONUT OIL-BASED BIOFUEL DEMONSTRATES COMPARABLE THERMAL EFFICIENCY TO KEROSENE IN JET ENGINE TESTING > FLOCK CEO ADVOCATES FOR PRIVACY-SAFETY BALANCE AMID SURVEILLANCE BACKLASH > UNDERSTANDING THE NATURE OF FAILURE IN COMPLEX SYSTEMS > LEGAL COMPLEXITIES OF TRAINING AI MODELS ON COPYRIGHTED BOOKS > AROS OPERATING SYSTEM PORTED TO BARE-METAL RASPBERRY PI FOR AMIGA COMPATIBILITY