Your AI Code Reviewer Ran My Malware

The AI Now Institute published a proof-of-concept showing how AI code review tools can exploit security vulnerabilities. This attack, called 'Friendly Fire', demonstrates how an AI agent can execute malicious payloads simply by following instructions in a README file. This highlights the security risks posed by automated systems for engineers.