Type: url
Original: https://arxiv.org/pdf/2509.22040
Status: generated
Summary
A security paper presenting the first large-scale empirical study of prompt injection attacks against agentic AI coding editors (Cursor, GitHub Copilot) delivered via poisoned coding-rule files, introducing AIShellJack (314 attack payloads covering 70 MITRE ATT&CK techniques) and finding attack success rates as high as 84%, alongside real cited CVEs and defense/mitigation recommendations.