Auditing AI Coding Agents for Untrusted Content Ingestion and Per-Tool-Call Abuse
pr0h0•
Ransomware crews and malware campaigners are now abusing agentic coding tools like Cursor — via poisoned repos, malicious text files, and prompt injection — to turn untrusted content ingestion into domain admin access, so this walkthrough maps the attack chain and the per-tool-call controls that…
ai-securityprompt-injectioncursor
