{"data":{"id":"7b563627-fba1-467c-bcfc-0d15fce4d20d","title":"Attackers are crafting malicious AI instruction files to turn your agentic workflows into quiet criminal helpers","summary":"Attackers are poisoning AI instruction files (like CLAUDE.md, .cursorrules, or mcp.json) that developers share in code repositories to turn AI agents into data thieves. These files can contain hidden malicious instructions that trick the AI into stealing sensitive information like passwords, source code, and user prompts without leaving obvious traces that security tools can detect.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://www.csoonline.com/article/4204731/attackers-are-crafting-malicious-ai-instruction-files-to-turn-your-agentic-workflows-into-quiet-criminal-helpers.html","publishedAt":"2026-08-04T08:25:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","data_extraction","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Anthropic","OpenAI","Google","Microsoft"],"affectedVendorsRaw":["Anthropic","Claude","OpenAI","Codex","Google","Gemini","Cursor","Cline","GitHub Copilot","Mitiga"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-04T08:25:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}