Hiding in plain sight with vibe coding.

CyberWire Daily

Content provided by N2K Networks, Inc. and N2K Networks. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by N2K Networks, Inc. and N2K Networks or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

1d ago 21:49

MP3•Episode home

This week, Dave is joined by ⁠Ziv Karliner⁠, ⁠Pillar Security⁠’s Co-Founder and CTO, sharing details on their work on "New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents." Vibe Coding - where developers use AI assistants like GitHub Copilot and Cursor to generate code almost instantly - has become central to how enterprises build software today. But while it’s turbo-charging development, it’s also introducing new and largely unseen cyber threats.

The team at Pillar Security identified a novel attack vector, the ⁠"Rules File Backdoor"⁠, which allows attackers to manipulate these platforms into generating malicious code. It represents a new class of supply chain attacks that weaponizes AI itself, where the malicious code suggestions blend seamlessly with legitimate ones, bypassing human review and security tools.

The research can be found here:

⁠New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents

Learn more about your ad choices. Visit megaphone.fm/adchoices

3363 episodes

#Security #Software Development #Business #Tech News #Baltimore #Cyber #Cybersecurity #Hacking #News #Tech #Computer #N2K Networks, Inc #Daily News #InfoSec