Nieuwsbrief
HomeNieuwsDreigingenAdviezenVoor MKBToolsOver onsZoekenNieuwsbrief
Tools

Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obvious...

The Hacker News
11 augustus 2026· 2 min lezen

Let op: Dit artikel is automatisch opgehaald uit een externe bron en nog niet vertaald of bewerkt. Publicatie vereist handmatige review.

Originele bron: The Hacker News

A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction. The trick can work even after a blunt version of the same theft is refused: split the request into fragments that each look routine, place them in channels the assistant already uses, and let

Bron: The Hacker News — Lees het volledige artikel

Tags:#internationaal#ai#tools
Beveiligingscontent geverifieerd door Fortivox SecurityNederlandse cybersecurity-specialist voor het MKB — fortivoxsecurity.nl

Blijf op de hoogte

Volg CybersecurityNieuws.nl via RSS en mis geen enkel beveiligingsnieuws. Zelf iets gezien dat wij moeten weten? Tip de redactie.

Volg via RSSTip de redactie

Gerelateerde artikelen

Tools737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have OneA massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim to intercept browser traff...Tools"City-Forum" data-theft attacks target Salesforce, ServiceNow portalsAn ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. [...]ToolsPlug and Pwn attack uses fake USB devices for Windows SYSTEM accessSecurity researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor softwar...ToolsThe Threat Hiding in Your Hiring Process: How Fake Remote Workers Get InFake remote workers can exploit gaps between hiring checks, device delivery, and account access to enter organizations under false identities. Specops Software explains how documen...