Context compaction in coding agents can launder forged user instructions
Flattening harnesses accept forged approvals 87-100% of the time, while four role-typed harnesses reject the same attack.
58
Flattening harnesses accept forged approvals 87-100% of the time, while four role-typed harnesses reject the same attack.
Gen Digital found infostealers like Amatera and Remus stealing AI coding agent tokens, prompt histories, and MCP configs from infected Windows and macOS machines.
Gen Digital researchers report infostealer families Amatera, Remus and CallbackBeaver now harvest Claude, Cursor and Codex agent data, including tokens and MCP configs.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 384 readers · 416 views · 313 reads · all time 158K views