PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

GhostApproval: A Trust Boundary Gap in AI Coding Assistants

wiz.io | blog | #ai-security | #vulnerability-research | #human-in-the-loop | #ai-coding-assistants | #symlink | #cwe-61 | #trust-boundary
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Research found GhostApproval, a trust-boundary gap in six AI coding assistants (Amazon Q, Claude Code, Cursor, Windsurf): symlinks plus deceptive prompts let malicious repos bypass human approval.
Published
Collected

Related coverage

research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
blog · wiz.io
“Black October” for AI Developer Platforms
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · wiz.io
The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
AI agents are changing how attackers operate. Explore real-world cases of agentic attacks, learn how to identify their fingerprints, and discover what they mean for the future of cybersecurity.
blog · wiz.io
MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension
Wiz Research found that the Amazon Q VS Code extension auto-loaded MCP servers from workspace files, letting a malicious repo run code and steal cloud credentials via a git clone (CVE-2026-12957).
blog · wiz.io
Primer on GitHub Actions Security - Threat Model, Attacks and Defenses (Part 1/2)
Part one of a GitHub Actions security primer: the trusted vs untrusted threat model, three risks — PR pwnage, script injection, third-party components — seen in tj-actions, Ultralytics, Trivy.
Back