Comment on Claude, Codex, and Hermes installed unowned code inside corporate networks

01189998819991197253@infosec.pub ⁨1⁩ ⁨month⁩ ago

• OpenStars@discuss.online ⁨1⁩ ⁨month⁩ ago

  The first paragraph in the article says:

  Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed automatically when visited by many AI agents. A few dozen companies, some of them Fortune 500s, are among those that executed proof-of-concept code. At least one misconfigured site is directing visitors, human or AI, to live malware.

  So… yes. All someone has to do is register to become the new owner of the previously non-existent resource and then they can serve up whatever content they wish to the slop machines.

  source

  • 01189998819991197253@infosec.pub ⁨1⁩ ⁨month⁩ ago

    Sorry. I was being sarcastic. Forgot the s tag. I’m adding now.

    source

    • OpenStars@discuss.online ⁨1⁩ ⁨month⁩ ago

      That should help! 😃

      source