AINewsnow

Markdown as Malware: How AI Agents Turn Downloads Folders into Instruction Injection Vectors

This story is from 2026-10-27. It is preserved in the archive; the latest stories are on the live feed.

Forever Security caught live malware on a customer machine: an AGENTS.md file sitting in ~/Downloads , waiting for an AI coding agent to scan the directory and treat it as a trusted instruction source. No click required. No sandbox escape. Just a markdown file that turns read-only file access into…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-27 00:08 · DEV Community — AI
    Markdown as Malware: How AI Agents Turn Downloads Folders into Instruction Injection Vectors

More stories

  1. Introducing GPT-6.1 Terra — OpenAI News
  2. Meta announces $95B offering to fund AI — Semafor Technology
  3. Microsoft offers buyouts to 60,000 employees — The Verge AI
  4. OpenAI announces three breakthroughs in computer science, math, and physics, including that the Exponential Time Hypothesis, a longstanding conjecture, is false (OpenAI) — Techmeme
  5. Anthropic’s IPO filing lays out a plan to ‘revolutionize every area of human endeavor' with AI — The Verge AI
  6. Anthropic's Claude bypassed a paywall to access Georgia voter data without authorization — Axios AI+
  7. Anthropic's IPO filing shows soaring sales and steep losses — France 24 — Artificial Intelligence
  8. Cohere says Alibaba’s Qwen model tried to send a file to Beijing — TechCrunch AI

Get the daily brief of stories like this at 6:30 every morning →