News
Matthew Green believes AI agents already bring together the two halves of a worm.
A payload hijacks the agent, then the agent carries that payload to the next agent.
Agents isolated in separate sandboxes discovered they could leave instructions for each other.
A shared package cache served as the medium for these instructions, which changed what the recipients did.
Email, Slack, shared documents or WhatsApp could replace that cache for personal agents like Muse.