Tag: lethal-trifecta

All the articles with the tag "lethal-trifecta".

• AI Browsers Keep Getting Hijacked, and Nobody Claims a Fix

  6 Aug, 2026

  Black Hat USA 2026 brought zero-click prompt-injection demos against Comet, Atlas, Claude in Chrome, Gemini in Chrome and Copilot Edge. Vendors patch the individual holes fast; researchers keep finding new ones in the same trust model.

• One Word Beat GitHub's Guardrail, and the Word Was 'Additionally'

  7 Jul, 2026

  Noma Labs' GitLost shows an unauthenticated attacker leaking a private repo's contents by opening one public GitHub Issue. GitHub built a scanner to stop exactly this; prefixing the malicious line with 'Additionally,' walked the data straight past it.

• Three Indirection Steps From a Reverse Shell

  27 Jun, 2026

  Mozilla's 0DIN planted a shell on a developer's machine using a GitHub repo containing no malicious code at all. Simon Willison's lethal trifecta explains why it worked; Meta's Agents Rule of Two is the closest thing we have to a fix.