AnalysisCybersecurityJuly 9, 2026
GhostApproval attack uses decades-old technique to trick AI coding tools

Wiz disclosed the GhostApproval attack method that tricks AI coding assistants into executing malicious commands on the developer's machine. The attack exploits a decades-old prompt injection technique to hijack the tool's output and execute arbitrary code.