{"id":5550,"date":"2026-08-31T08:01:23","date_gmt":"2026-08-31T08:01:23","guid":{"rendered":"https:\/\/justfineinfotech.com\/ai-coding-agents-can-be-tricked-in-under-an-hour-researchers-find\/"},"modified":"2026-08-31T08:01:23","modified_gmt":"2026-08-31T08:01:23","slug":"ai-coding-agents-can-be-tricked-in-under-an-hour-researchers-find","status":"publish","type":"post","link":"https:\/\/justfineinfotech.com\/fr\/ai-coding-agents-can-be-tricked-in-under-an-hour-researchers-find\/","title":{"rendered":"AI coding agents can be tricked in under an hour, researchers find"},"content":{"rendered":"
\n\"AI
AI coding agents can be tricked in under an hour, researchers find<\/figcaption><\/figure>\n

Researchers have shown it takes less than an hour to trick a Fortune 500 company’s AI coding agent into pinging a server it controls, not through hacking, but by simply registering a package name that documentation already pointed to<\/p>\n

The vulnerability centres on llms.txt and llms-full.txt, files an increasing number of websites<\/a> now publish so AI agents can read their documentation more easily<\/p>\n

When researchers scanned 6,214 live domains belonging to defence contractors, Fortune 500 firms and major tech companies, they found 8,265 of these files<\/p>\n

Among them, 120 separate sites referenced code packages or domain names that had never actually been registered<\/p>\n

To investigate whether the flaw was possible to exploit, researchers registered some of the unregistered domain names themselves and offered software that would call home immediately after being installed<\/p>\n

The system belonging to a Fortune 500 company responded within an hour, followed by dozens of other organisations not much later.\u00a0<\/p>\n

Unregistered domain names could have arisen due to typical reasons, such as abandoned software packages, copying errors, and renaming projects, but the researchers remarked that whatever could be registered by the researchers could be registered by cybercriminals<\/p>\n

This threat is actual in cases where the AI agent has access to run shell or package manager commands and faces such an old-fashioned or erroneous command<\/p>\n

In our tests, Claude, the Codex from OpenAI, and the Hermes from Nous Research turned out to be vulnerable to this erroneous documentation, as experts refer to this vulnerability as slopsquatting<\/p>\n

Partagez cette histoire\u00a0:
\nRendez-nous favoris sur Google<\/a><\/p>\n

\n

\n En rapport:<\/strong>
\n
\n Formation en automatisation num\u00e9rique au B\u00e9nin\u00a0: 5 comp\u00e9tences cl\u00e9s recherch\u00e9es par les employeurs en 2026
\n <\/a>\n <\/p>\n

\n <a href="https:\/\/yoursite.com\/automation-africa\/" title="WhatsApp<\/a> Marketing Automation Africa : 6 erreurs dangereuses commises par les marques au Nig\u00e9ria\u201d>
\n Automatisation du marketing WhatsApp en Afrique\u00a0: 6 erreurs dangereuses commises par les marques au Nig\u00e9ria
\n <\/a>\n <\/p>\n<\/div>\n

\n

Vous souhaitez apprendre cela de mani\u00e8re pratique ?<\/h3>\n

Rejoindre Justfine Infotech<\/strong> et d\u00e9velopper de v\u00e9ritables comp\u00e9tences num\u00e9riques en IA, automatisation, d\u00e9veloppement web, marketing digital, bureautique, e-commerce, travail ind\u00e9pendant et cybers\u00e9curit\u00e9<\/a>.<\/p>\n

Programmes disponibles :<\/strong>
\n Certificat de 6 semaines \u2022 Certificat professionnel de 3 mois \u2022 Dipl\u00f4me de 6 mois \u2022 Dipl\u00f4me professionnel complet<\/p>\n

WhatsApp :<\/strong>
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n

Inscrivez-vous d\u00e8s maintenant<\/a><\/p>\n<\/div>\n

Source: www.thenews.com.pk<\/a><\/p>","protected":false},"excerpt":{"rendered":"

Researchers have shown it takes less than an hour to trick a Fortune 500 company’s AI coding agent into pinging a server it controls, not through hacking, but by simply registering a package name that documentation already pointed to<\/p>","protected":false},"author":1,"featured_media":5553,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[66],"tags":[217,168,1523,1521,1522],"class_list":["post-5550","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-skills-career-opportunities","tag-agents","tag-coding","tag-hour","tag-tricked","tag-under"],"_links":{"self":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/5550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/comments?post=5550"}],"version-history":[{"count":1,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/5550\/revisions"}],"predecessor-version":[{"id":5552,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/5550\/revisions\/5552"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media\/5553"}],"wp:attachment":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media?parent=5550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/categories?post=5550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/tags?post=5550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}