Defensive AI Agents Can Be Hijacked for Remote Code Execution
AINowInstitute · x · 2026-07-08
AI Now Institute has published a proof-of-concept vulnerability research named "Friendly Fire". The study reveals that defensive AI agents like Claude Code and Codex can be maliciously hijacked to trigger Remote Code Execution (RCE) during security scans.
Related event: Research Reveals Defensive AI Agents Vulnerable to Hijacking(4 posts)→
More from coding & agent
- Nitro Modules v1 gets Node.js support: one native module codebase for iOS and macOS — Birchlabs · 2026-10-27
- Google Graph Mining Team Builds Trillion-Edge FarAway with Gemini 4 Argon Agents in 5 Hours — rseroter · 2026-10-27
- Four Gemini agents beat Minecraft autonomously in 27 hours, writing 2,783 programs — rohanpaul_ai · 2026-10-27
- Planning a Master-Agent Architecture: LangGraph vs Microsoft Agent Framework — DonXendon · 2026-10-27
- Vibe-coding a better Matter smart home setup in 10 minutes after iPhone Home app timeouts — blixt · 2026-10-27
- Score centering lands in TRL: default-on for async GRPO, stabilizes RL under mismatch — _lewtun · 2026-10-27