CERT-EU shows a backdoored coding-agent extension can steal credentials without the model
CERT-EU's AI team planted a trigger in two otherwise working third-party extensions for coding-agent harnesses and collected host details, environment variables and credential files in the background, with no tool call for agent-level controls to catch. For IBM i developers using Bob or any coding agent, treat extensions as privileged code: pin and inventory them, keep IBM i passwords and SSH keys out of environment variables and the workspace, and connect from the workstation with a low-authority developer profile, never one with *ALLOBJ.
Built In.
The best of the log, every two weeks. One idea, one proof, one next step.
Built In.
The best of the log, every two weeks. One idea, one proof, one next step.
References do not imply endorsement. The link goes to the original source; the words are ours. Silver Lake Financial Group and Alder & Pine Home, where mentioned, are fictitious demonstration companies.