Your Coding Agent Can Be Hijacked Through a Bug Report
Researchers found that AI coding tools like Claude Code and Cursor can be tricked into running attacker code by poisoning a Sentry error report. Plus: a Chrome zero-day confirmed in the wild, and Vietnamese hackers with a supply chain twist.