July 8, 2026

One symlink trick breaks 6 top AI coding agents, from Amazon

black and grey metal crane photography
Verstappen Photography / Unsplash

Security firm Wiz found one old Unix trick that breaks six popular AI coding assistants, from Amazon Q to Cursor. A booby-trapped repository can walk an agent past its own safety prompt. The payoff is a planted key that hands an attacker the develope...