Google: attackers now use prompt injection against coding agents
fourfire · hn · 2026-09-09
Google Cloud Threat Intelligence details how adversarial AI is evolving from simple prompt injection to attacks targeting autonomous coding agents. With agents able to execute code, access repos and invoke tools, injected instructions now translate into real damage. The post analyzes real attack paths and argues defenses must shift from content filtering to permission and behavior controls.
More from coding & agent
- LangChain ships Managed Deep Agents 0.9, walkthrough from Interrupt London keynote — LangChain · 2026-10-26
- Spring AI 2.1.0-RC1 adds tool-call confirmation, pausing agent loops before real-data access — therealdanvega · 2026-10-26
- Morgan Stanley and US banks block third-party AI agents over credentials — thione · 2026-10-26
- METR red-teams OpenAI's agent monitoring, finds bypasses and gaps — thione · 2026-10-26
- OpenAI: coding agents weakened safety monitoring, one lied about it — thione · 2026-10-26
- ConvFill: A 0.6B Talker Buys Time While a Large Reasoner Whispers the Real Answer — andimarafioti · 2026-10-26