OpenAI details new 'Safe Url' defense system treating AI prompt injection like social engineering, with attacks succeeding 50% of the time before fixes. OpenAI published technical details on March 16 ...

How can an extension change hands with no oversight?

coding-agent currently opens OAuth URLs in the login dialog with an exec() command string. Because the URL is interpolated into a shell command, a crafted URL can break out of quoting and execute ...