@the_cyber_news X analytics

Cyber Security News@the_cyber_news·101.4K followers·19d ago

‼️ Hackers Can Hijack OpenAI Codex and Claude Using Malicious Files in the Downloads Folder Details: https://t.co/HIpI4D6Xo8 A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. The incident began when Forever Security blocked an AI coding agent from installing a package named function-color. Investigators traced the order back to an AGENTS.md file stored in the customer’s ~/Downloads folder. An AGENTS.md file is similar to a README written for AI tools. OpenAI’s documentation says Codex reads these files before starting work and uses them to learn project rules, commands, and other instructions. Claude Code uses CLAUDE.md for a similar purpose and reads it at the start of a conversation. #CybersecurityNews

Cyber Security News@the_cyber_news·101.4K followers·25d ago

‼️ Claude AI Detects Hidden Crypto Miner While Building Temperature Monitor App on Mac Details: https://t.co/diCJfSN0AA An ordinary coding task led to an unexpected security discovery when Claude Code reportedly found a hidden cryptocurrency miner on a developer’s Mac. The AI assistant was building a temperature monitoring app when unusually high sensor readings prompted it to investigate CPU activity. It identified XMRig consuming about 1,175% CPU, described as roughly 12 cores of processing load. The developer, posting as u/UntilHEX on Reddit, said Claude checked running processes after reviewing raw sensor data. The discovery offered an explanation for the Mac’s poor performance. However, the account remains a user report supported by a screenshot, rather than a published forensic investigation. #CybersecurityAwarenessMonth #cybersecuritynews