Archive

Fake Sentry error reports hijack AI coding agents into running attacker code

The attack requires no exploit, no prior compromise, and no user error beyond normal workflow, meaning AI coding agents connected to external services via MCP are themselves an active attack surface that existing security controls do not catch.