News
Flaws in AI coding agents allow the execution of malicious code.
Microsoft fixed CVE-2026-103572, a Copilot flaw affecting Visual Studio and SQL Server Management Studio.
On Windows and WSL, opencode 1.18.33 fixes a flaw exploitable by a malicious MCP server, with no CVE.
In a test, a child session of Claude Code ran a hook without confirmation in a malicious repository.
In a test, Copilot CLI decrypted malicious content then sent local files to an attacker.