AI Coding Tools Hacked via Old Technique

Wiz disclosed GhostApproval, an attack method that tricks AI coding assistants into executing malicious code on a developer's machine. The technique exploits a decades-old prompt injection vulnerability, allowing attackers to bypass safety checks and compromise the development environment.