A six-month investigation into AI-assisted development tools has uncovered over thirty data-analytics-id=”inline-link” href=”https://www.tomshardware.com/tag/security” data-auto-tag-linker=”true” data-mrf-recirculation=”inline-link” data-before-rewrite-localise=”https://www.tomshardware.com/tag/security”>security vulnerabilities that allow data exfiltration and, in some cases, remote code execution. The findings, described in the data-analytics-id=”inline-link” href=”https://maccarita.com/posts/idesaster/” target=”_blank” data-url=”https://maccarita.com/posts/idesaster/” referrerpolicy=”no-referrer-when-downgrade” data-hl-processed=”none” data-mrf-recirculation=”inline-link”>IDEsaster research report, show how AI agents embedded in IDEs such as Visual Studio Code, JetBrains products, Zed, and numerous commercial assistants can be manipulated into leaking sensitive information or executing attacker-controlled code.
According to the research, 100% of tested AI IDEs…
