Claude, Codex, Hermes agents install unowned code via llms.txt
Researchers found 120 llms.txt files on corporate sites pointing to unregistered packages; agents from Claude, Codex, and Hermes executed them, with a Fortune 500 company phoning home within an hour.
1 source
Cybersecurity by email
Get an email when there's news on Cybersecurity
No news that day, no email.
More stories today
- Empirik launches with $21M to predict IT outages
- Musk: AI to boost global economy 20-30%
- Atos upskills 400 engineers in agentic AI with AWS
- Top AI open source projects shut off PRs, use own agents
- AWS details securing Amazon Quick from POC to production