0xensec Daily Roundup — July 10, 2026
Today’s landscape in AI security is characterized by rapid advances in agentic artificial intelligence—autonomous systems that enact real-world workflows—but also by the compounding risks such wide empowerment brings. Critical vulnerabilities have been exposed in leading AI coding agents, with research revealing multiple vectors for exploiting these autonomous tools. The “Friendly Fire” proof-of-concept attack published by the AI Now Institute demonstrates how models like Anthropic’s Claude Code and OpenAI’s Codex, when running autonomously, can be tricked into executing attacker-supplied malicious code [1]. In a similar vein, the so-called “GhostApproval” symlink attack discovered by Wiz found six major AI coding assistants susceptible to file operation manipulation, allowing attackers to overwrite sensitive files by hijacking permission prompts [2].
Read more →