AI coding agents hijacked using AGENTS.md file in Downloads folder
2026-10-26T01:23:22Z•76a96538dc9fedc2384106d7c86e49e399d0b16772405b259ca2372326e10a9e
AI-agent-securityArubaOSPHPUEFI-bootkitVeloCloud-OrchestratorWindows-Server-2016active-exploitationcredential-theftdata-breachinformation-stealerphishingprompt-injectionremote-code-executionsecrets-rotationsecure-boot-bypasssupply-chain-compromisevulnerabilityzero-day
What happened
A BleepingComputer security-news feed covering active and emerging threats, including AI-agent prompt/instruction hijacking, a UEFI bootkit bypassing Secure Boot, remote code execution in abandoned software, unpatched PHP RCE, critical ArubaOS vulnerabilities, an actively exploited VeloCloud Orchestrator zero-day, and multiple supply-chain and data-breach incidents. The most urgent items involve actively exploited or maximum-severity vulnerabilities and credential or secret theft.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 76a96538dc9fedc2384106d7c86e49e399d0b16772405b259ca2372326e10a9e
- Enrichment time
- 2026-10-26T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.