Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
72
Organization
Noma Security
- Mentions · 7d2
- Mentions · 30d4
- All mentions6
- First seenAug 24, 2026
- Last mentioned3d ago
Timeline
6 articles · newest firstEmbedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
74
How Claude Code’s 256KB blind spot put developers’ secrets in the preview pane
Noma says Claude Code's HTML preview could run malicious JavaScript and steal developer secrets; Anthropic patched it.
74
AI is turning offensive security into a continuous necessity
Security leaders argue AI-accelerated attacks require continuous, automated penetration testing and offensive security instead of annual compliance-driven assessments.
25
AIR raises $50M to help companies vet the skills and add-ons AI agents use
AI security startup AIR exits stealth with $50M across two seed rounds to continuously vet skills, plugins, and MCP servers used by enterprise AI agents.
46
One in four MCP servers opens AI agent security to code execution risk
Noma Security whitepaper finds most popular AI Skills and many MCP servers carry high-risk capabilities, with state changes most prevalent.
62
Appears with
- Anthropicvendor · 3
- GitHubvendor · 2
- Microsoftvendor · 2
- Cursorvendor · 2
- OpenAIvendor · 2
- Forever Securityorganization · 2
- VS Codeproduct · 2
- GitHub Copilotai model · 1
- Proofpointorganization · 1
- Agentforceproduct · 1
- Salesforcevendor · 1
- Claude Code Desktopproduct · 1
- Sequoiaorganization · 1
- Operant AIorganization · 1
- Cloud Security Allianceorganization · 1
- Greenoaksorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.