Research reveals that malicious instructions in AI agent skills evade static code analysis, creating blind spots for credential theft and data exfiltration in development workflows.
A critical vulnerability in Ivanti Xtraction allows authenticated attackers to hijack requests and steal connector credentials in versions prior to 2026.4.
ASOS confirmed a data breach after attackers exploited stolen employee credentials to access the Simon AI marketing platform, according to Infosecurity Magazine.