#security

AI Coding Assistants Have a Security Blind Spot You Need to Know About

Three research teams found the same flaw in Amazon Q, Claude Code, and Windsurf: auto-executing workspace configs that can turn your IDE into an attack vector.