discovered a significant vulnerability affecting GitHub Copilot and Cursor - the world's leading AI-powered code editors. This new attack vector, dubbed the "Rule Files Backdoor," allows attackers ...

Hackers can exploit AI code editors like GitHub Copilot to inject malicious code using hidden rule file manipulations, posing ...

The security researchers at Pillar Security have uncovered a new supply chain attack vector named “Rules File Backdoor.” The ...

Data Exfiltration Capabilities: Well-crafted malicious rules can direct AI tools to add code that leaks sensitive information while appearing legitimate, including environment variables, database ...