AI moves fast. Stay in the know.

Security researchers have demonstrated a new attack technique that can manipulate popular AI coding assistants into modifying sensitive files outside an approved project workspace. The attack, called GhostApproval, exploits symbolic links hidden inside malicious code repositories. Because some AI tools do not display the actual destination of a file change, developers may approve what appears to be a harmless action while the coding agent alters system files that could enable remote code execution.

Source: SecurityWeek

What to know:

• GhostApproval was successfully tested against Claude Code, Amazon Q Developer, Cursor, Google Antigravity, Augment, and Windsurf.
• Attackers can place a symbolic link inside a seemingly legitimate repository that points to a sensitive file outside the coding workspace.
• When an AI coding assistant edits the disguised file, it may follow the link and modify the sensitive destination instead.
• Some affected tools did not show the file’s actual destination in their approval prompts, meaning users could authorize an action without understanding its true impact.
• The technique could potentially be used to modify configuration files, alter system behavior, or achieve remote code execution on a developer’s machine.
• AWS, Google, and Cursor confirmed the issue and released patches. Anthropic said it had already introduced mitigations, while Augment and Windsurf had acknowledged the reports but had not released fixes at the time of publication.
• The incident shows that human approval is not an effective security control when the information presented to the user does not accurately represent what an AI agent will do.

Why it matters:

For businesses adopting AI coding tools, the risk extends beyond the prompts developers enter or the code that AI generates. Coding agents can read and modify files, run commands, call APIs, and interact with development environments using the employee’s existing permissions. A trusted or approved AI tool can therefore introduce new risks when its actions are not independently monitored.

Organizations need visibility into which coding assistants are being used, what files and systems they access, and whether their actions remain consistent with the user’s original request. Continuous AI risk assessment, monitoring of IDE-assistant activity, policy checks on file and tool actions, and audit-ready records can help detect unusual behavior before it leads to system compromise. Solutions that provide on-device visibility and policy evaluation across IDE assistants, file activity, API calls, code commits, and shell commands are becoming increasingly important to manage this risk.

Agentic AI tools are already being used in regulated industries for finance and audit workflows, including testing, documentation, risk assessment, and reporting. But research warns that many organizations are adopting these tools faster than they are updating the governance, oversight, and operating models needed to control them. In regulated environments, that gap can quickly turn AI-driven efficiency into compliance, accountability, and operational risk.

Source: TechRadar Pro

What to know:

• Agentic AI tools are now being embedded in finance and audit operations, where they can execute multi-step tasks with limited human intervention.
• Many organizations are focused on what AI can do, but have not fully assessed whether their governance frameworks and human oversight capacity are ready.
• Traditional audit workflows were designed around human judgment, while agentic AI can move faster and silently resolve ambiguity instead of escalating it.
• Governance gaps can appear when risk, compliance, finance, and technology teams work with different assumptions about how AI is being used.
• This is a warning that adoption metrics and faster cycle times do not prove that AI systems are being properly reviewed, governed, or controlled.
• Organizations need centralized governance, clear accountability, escalation paths, workforce readiness, and integrated data flows before scaling agentic AI.

Why it matters:

For mid-sized businesses adopting GenAI, the risk is not just whether AI tools improve productivity, but whether the organization can see and control how they operate. When AI agents are added to workflows without clear ownership, audit trails, escalation rules, or monitoring, businesses may not know where human judgment ends and automation begins. Continuous AI risk assessment, prompt-level visibility, and governance monitoring are critical before agentic AI becomes deeply embedded in business operations.