A newly disclosed flaw in the plugin systems of four major AI coding agents is forcing a hard look at how much trust developers hand over the moment they type an install command. Security firm Air ...

Sellers can now automate routine tasks 24/7 with Seller Assistant and bring their Amazon data and Seller Central insights into the AI tools they already use. Today, we're announcing the next evolution ...

The AI industry already knew attackers could poison plugin marketplaces. Its answer was to lock every plugin to one reviewed version of its code. That lock is what just broke. Researchers at Air ...

Plugin4Shell is a disclosed supply-chain flaw in plugin installation flows for Claude Code, Codex, GitHub Copilot and Gemini CLI: clients requested pinned Git commits but did not verify what code ...

Eine Sicherheitslücke mit dem Namen Plugin4Shell hat am 17. September 2026 vier der meistgenutzten KI-Coding-Agents gleichzeitig getroffen: Claude Code von Anthropic, Codex von OpenAI, GitHub Copilot ...

Rather than migrate first and evaluate afterwards, I decided to establish a measurable baseline for my existing Custom GPT, GM INFO - IA Technologies ©, before moving it to the new Plugin architecture ...

Want only the AI that hits your stack? Build an agent that tracks your companies and topics, and skips everything else. Plugin4Shell proves that SHA pinning in AI coding agent marketplaces is a client ...

A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a ...

AIR disclosed Plugin4Shell, a zero-click remote-code-execution vulnerability in plugin installation flows for major AI coding agents. AIR researchers Or Nevo, Dor Granat, and Niv Hoffman report that ...

Four major AI coding agents, Claude Code, Codex, GitHub Copilot and Gemini CLI, all share the same zero-click RCE vulnerability, one that could give an attacker the same reach into a company’s systems ...

A zero-click vulnerability that allows remote code execution affects all of the major AI coding agents - Anthropic’s Claude Code, OpenAI’s Codex, Google's Gemini CLI, Microsoft’s Copilot, and ...

On the Microsoft Copilot Studio Blog, Ryan Cunningham wrote that Microsoft is introducing natural language app building in Copilot Cowork and Copilot Studio, bringing agentic app creation into the ...