Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.
A “systematic vulnerability pattern” in at least six of the most widely used AI coding assistants can be abused to trick ...