Friday, August 29, 2025
  • About Web3Wire
  • Web3Wire NFTs
  • .w3w TLD
  • $W3W Token
  • Web3Wire DAO
  • Media Network
  • RSS Feed
  • Contact Us
Web3Wire
No Result
View All Result
  • Home
  • Web3
    • Latest
    • AI
    • Business
    • Blockchain
    • Cryptocurrencies
    • Decentralized Finance
    • Metaverse
    • Non-Fungible Token
    • Press Release
  • Technology
    • Consumer Tech
    • Digital Fashion
    • Editor’s Choice
    • Guides
    • Stories
  • Coins
    • Top 10 Coins
    • Top 50 Coins
    • Top 100 Coins
    • All Coins
  • Exchanges
    • Top 10 Crypto Exchanges
    • Top 50 Crypto Exchanges
    • Top 100 Crypto Exchanges
    • All Crypto Exchanges
  • Stocks
    • Blockchain Stocks
    • NFT Stocks
    • Metaverse Stocks
    • Artificial Intelligence Stocks
  • Events
  • News
    • Latest Crypto News
    • Latest DeFi News
    • Latest Web3 News
  • Home
  • Web3
    • Latest
    • AI
    • Business
    • Blockchain
    • Cryptocurrencies
    • Decentralized Finance
    • Metaverse
    • Non-Fungible Token
    • Press Release
  • Technology
    • Consumer Tech
    • Digital Fashion
    • Editor’s Choice
    • Guides
    • Stories
  • Coins
    • Top 10 Coins
    • Top 50 Coins
    • Top 100 Coins
    • All Coins
  • Exchanges
    • Top 10 Crypto Exchanges
    • Top 50 Crypto Exchanges
    • Top 100 Crypto Exchanges
    • All Crypto Exchanges
  • Stocks
    • Blockchain Stocks
    • NFT Stocks
    • Metaverse Stocks
    • Artificial Intelligence Stocks
  • Events
  • News
    • Latest Crypto News
    • Latest DeFi News
    • Latest Web3 News
No Result
View All Result
Web3Wire
No Result
View All Result
Home Artificial Intelligence

New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents Through Compromised Rule Files

March 18, 2025
in Artificial Intelligence, GlobeNewswire, Web3
Reading Time: 5 mins read
5
SHARES
245
VIEWS
Share on TwitterShare on LinkedInShare on Facebook

TEL AVIV, Israel, March 18, 2025 (GLOBE NEWSWIRE) — Pillar Security, a pioneering company in AI security, discovered a significant vulnerability affecting GitHub Copilot and Cursor – the world’s leading AI-powered code editors.

This new attack vector, dubbed the “Rule Files Backdoor,” allows attackers to covertly manipulate these trusted AI platforms into generating malicious code that appears legitimate to developers.

This newly discovered attack vector exploits hidden configuration mechanisms within these tools, enabling attackers to inject malicious code suggestions that blend seamlessly into legitimate AI-generated recommendations and bypass human scrutiny and conventional security checks.

Unlike traditional code injection attacks that target specific vulnerabilities, “Rule Files Backdoor” represents a significant risk by weaponizing the AI itself as an attack vector, effectively turning the developer’s most trusted assistant into an unwitting accomplice.

“This new attack vector demonstrates that rule files can instruct AI assistants to subtly modify generated code in ways that introduce security vulnerabilities while appearing completely legitimate to developers,” said Ziv Karliner, CTO & Co-Founder of Pillar Security. “Developers have no reason to suspect their AI assistant is compromised, as the malicious code blends seamlessly with legitimate suggestions. This represents a fundamental shift in how we must think about supply chain security.”

Key Findings and Implications:

  • Widespread Industry Exposure: The vulnerability affects Cursor and GitHub Copilot, which collectively serve millions of developers and are integrated into countless enterprise development workflows worldwide.
  • Minimal Attack Requirements: Execution requires no special privileges, administrative access, or sophisticated tools–attackers need only manipulate configuration files within targeted repositories.
  • Undetectable Infiltration: Malicious code suggestions blend seamlessly with legitimate AI-generated code, bypassing both manual code reviews and automated security scanning tools.
  • Data Exfiltration Capabilities: Well-crafted malicious rules can direct AI tools to add code that leaks sensitive information while appearing legitimate, including environment variables, database credentials, API keys, and user data–all under the guise of “following best practices.”
  • Long-Term Persistence & Supply Chain Risk: Once a compromised rule file is incorporated into a project repository, it affects all future code generation, with poisoned rules often surviving project forking, creating vectors for supply chain attacks that affect downstream dependencies.

Who is Affected?
A 2024 GitHub survey found that nearly all enterprise developers (97%) are using Generative AI coding tools. According to Pillar, because these rule files are shared and reused across multiple projects, one compromised file can lead to widespread vulnerabilities. The research identified several propagation vectors:

  1. Developer Forums and Communities: Malicious actors sharing “helpful” rule files that unwitting developers incorporate
  2. Open-Source Contributions: Pull requests to popular repositories that include poisoned rule files
  3. Project Templates: Starter kits containing poisoned rules that spread to new projects
  4. Corporate Knowledge Bases: Internal rule repositories that, once compromised, affect all company projects

Mitigation

To mitigate this risk, we recommend the following technical countermeasures:

  1. Audit Existing Rules: Review all rule files in your repositories for potential malicious instructions, focusing on invisible Unicode characters and unusual formatting
  2. Implement Validation Processes: Establish review procedures specifically for AI configuration files, treating them with the same scrutiny as executable code
  3. Deploy Detection Tools: Implement tools that can identify suspicious patterns in rule files and monitor AI-generated code for indicators of compromise
  4. Review AI-Generated Code: Pay special attention to unexpected additions like external resource references, unusual imports, or complex expressions

Following responsible disclosure practices, Pillar alerted both Cursor (February 26) and GitHub (March 12), who responded that users bear responsibility for reviewing AI-generated code suggestions.

“Given the growing reliance on AI coding assistants within development workflows, we believe it’s essential to raise public awareness about potential security implications. We have reached an era where AI coding assistants must be regarded as critical infrastructure,” said Karliner.

Link to the full report: www.pillar.security/blog/new-vulnerability-in-github-copilot-and-cursor-how-hackers-can-weaponize-code-agents

About Pillar Security

Pillar is a unified, end-to-end AI security platform that accelerates AI initiatives by establishing robust security foundations across the entire AI lifecycle. By embedding security from development through runtime, Pillar enables organizations to ship AI-powered applications and agents with confidence while managing critical business risks.

The platform’s comprehensive capabilities—including AI fingerprinting, asset inventory, and deep integration with development and data platforms—create a secure foundation that prevents data breaches and ensures compliance. Through tailored adversarial AI testing and adaptive guardrails aligned with industry standards, Pillar removes security bottlenecks, allowing teams to innovate and deploy AI faster without compromising on security.

About Web3Wire
Web3Wire – Information, news, press releases, events and research articles about Web3, Metaverse, Blockchain, Artificial Intelligence, Cryptocurrencies, Decentralized Finance, NFTs and Gaming.
Visit Web3Wire for Web3 News and Events, Block3Wire for the latest Blockchain news and Meta3Wire to stay updated with Metaverse News.
ShareTweet1ShareSendShare2
Previous Post

Notice to annual general meeting in Agillic A/S

Next Post

Nerdio Secures $500 Million in Series C Investment from General Atlantic at $1 Billion+ Valuation

Related Posts

Cross-Border B2C E-Commerce Market to Expand from USD 1,122.08 Billion in 2023 to USD 4,590.78 Billion by 2030 at 21.92% CAGR – Cross-Border B2C E-Commerce Market forecast

Cross-Border B2C E-Commerce Market ◉ Opening ParagraphAccording to a Maximize Market Research report, the Cross-Border B2C E-Commerce Market was valued at USD 1,122.08 billion in 2023 and is expected to nearly quadruple to USD 4,590.78 billion by 2030-growing at a robust CAGR of 21.92%.Download your sample copy of this report...

Read moreDetails

STACK Infrastructure Reinforces Responsible Development Principles through Project Jupiter in New Mexico

DENVER, Aug. 28, 2025 (GLOBE NEWSWIRE) -- STACK Infrastructure (“STACK”), the digital infrastructure partner to the world’s most innovative companies and a leading global developer and operator of data centers, announced today its role in Project Jupiter, a proposed next-generation data center campus in Doña Ana County. STACK is collaborating...

Read moreDetails

Power Journey, Purify Any Source: Glacier Fresh Unveils OSMOGO Outdoor RV Water Purifier

In the wild, water isn`t just hydration--it`s survival. We built the OSMOGO to honor both. North America - August 28, 2025 - Glacier Fresh, a trusted leader in water filtration solutions, today launches the OSMOGO Outdoor RV Water Purifier, a breakthrough reverse osmosis (RO) system empowering RVers, van lifers, and...

Read moreDetails

What a San Bernardino Car Accident Attorney Can Do That Insurance Won’t

Image: https://www.abnewswire.com/upload/2025/08/a5dbc1b0cfb1d071e1a5a5582579c4be.jpgA San Bernardino car accident attorney can be an invaluable resource when life takes an unexpected turn on the road. Accidents often come out of nowhere, leaving victims not only with injuries but also with questions about medical bills, insurance claims, and long-term recovery. Handling these issues alone can...

Read moreDetails

Satisfaction of Additional Price Condition and Confirmation of Warrant Expiration Date

Alternate Price Condition of Warrants Satisfied on Thursday, August 28, 2025 Warrants Must be Exercised Prior to 5:00 p.m. New York City Time on Friday, August 29, 2025 Last Day of Warrant Trading on Nasdaq is Friday, August 29, 2025 Notice of Guaranteed Delivery is Available for Warrant Exercises 12.6...

Read moreDetails

iMini AI Launches Groundbreaking Automatically Mixed AI Agent

iMini AI, the world's first end-to-end "Super AI Agent," has officially entered international markets, including North America, Europe, and Southeast Asia. By integrating 25 leading AI models into one orchestrated platform, iMini AI is reshaping how individuals and enterprises approach research, creation, and execution.Breaking the Limits of Traditional AI ToolsWhile...

Read moreDetails

NVIDIA Announces Upcoming Event for Financial Community

SANTA CLARA, Calif., Aug. 28, 2025 (GLOBE NEWSWIRE) -- NVIDIA will present at the following event for the financial community: Goldman Sachs Communacopia + Technology ConferenceMonday, Sept. 8, 12:25 p.m. Pacific Time Interested parties can listen to the live audio webcast of NVIDIA financial presentations at investor.nvidia.com. Webcast replays are...

Read moreDetails

IBEX Limited to Announce Fourth Quarter and Fiscal Year 2025 Financial Results on September 11, 2025

WASHINGTON, Aug. 28, 2025 (GLOBE NEWSWIRE) -- IBEX Limited (“ibex”) (Nasdaq: IBEX), a leading global provider of business process outsourcing (BPO) and AI-powered customer engagement technology solutions, today announced it will report fourth quarter and fiscal year 2025 financial results after the market close on Thursday, September 11, 2025. Management...

Read moreDetails

XRP Approaches a Critical Breakthrough Point, BAYMiner Announces Strategy to Expand Digital Financial Accessibility

New York, August 28, 2025—The global cryptocurrency market is regaining momentum, with the performance of major digital assets once again attracting attention. XRP is approaching a key breakout point of $3.33, demonstrating a strong rebound in the cross-border payment token driven by regulatory compliance and institutional adoption. Meanwhile, Ethereum has...

Read moreDetails

EES Shipping Launches Free Global Tariffs & Rules Lookup Tool

Live, daily-updated duty schedules, FTA rules, and compliance guidance--available at no cost.Australia, 28th Aug 2025 -- EES Shipping, a leading international freight forwarder and customs brokerage based in Western Australia, today announced the launch of a?Free Global Tariffs & Rules Lookup tool, giving importers, exporters, and logistics professionals instant access...

Read moreDetails
Web3Wire NFTs - The Web3 Collective

Web3Wire, $W3W Token and .w3w tld Whitepaper

Web3Wire, $W3W Token and .w3w tld Whitepaper

Claim your space in Web3 with .w3w Domain!

Web3Wire

Trending on Web3Wire

  • Top 5 Wallets for Seamless Multi-Chain Trading in 2025

    50 shares
    Share 20 Tweet 13
  • Unifying Blockchain Ecosystems: 2024 Guide to Cross-Chain Interoperability

    97 shares
    Share 39 Tweet 24
  • Top Cross-Chain DeFi Solutions to Watch by 2025

    53 shares
    Share 21 Tweet 13
  • Discover 2025’s Top 5 Promising Low-Cap Crypto Gems

    71 shares
    Share 28 Tweet 18
  • Discover the Best Metaverse Crypto Projects and Virtual Worlds 2025

    46 shares
    Share 18 Tweet 12
Join our Web3Wire Community!

Our newsletters are only twice a month, reaching around 10000+ Blockchain Companies, 800 Web3 VCs, 600 Blockchain Journalists and Media Houses.


* We wont pass your details on to anyone else and we hate spam as much as you do. By clicking the signup button you agree to our Terms of Use and Privacy Policy.

Web3Wire Podcasts

Upcoming Events

Web 3.0 and AI Summit 2025

2025-09-11
Frankfurt
Summit

Latest on Web3Wire

  • Cross-Border B2C E-Commerce Market to Expand from USD 1,122.08 Billion in 2023 to USD 4,590.78 Billion by 2030 at 21.92% CAGR – Cross-Border B2C E-Commerce Market forecast
  • STACK Infrastructure Reinforces Responsible Development Principles through Project Jupiter in New Mexico
  • Power Journey, Purify Any Source: Glacier Fresh Unveils OSMOGO Outdoor RV Water Purifier
  • What a San Bernardino Car Accident Attorney Can Do That Insurance Won’t
  • Satisfaction of Additional Price Condition and Confirmation of Warrant Expiration Date

RSS Latest on Block3Wire

  • Covo Finance: Revolutionary Crypto Leverage Trading Platform
  • WorldStrides and HEX Announce Partnership to Offer High School and University Students Innovative Courses Designed to Improve Their Outlook in the Digital Age
  • Cathedra Bitcoin Announces Leasing of 2.5-MW Bitcoin Mining Facility
  • Global Web3 Payments Leader, Banxa, Announces Integration With Metis to Usher In Next Wave of Cryptocurrency Users
  • Dexalot Launches First Hybrid DeFi Subnet on Avalanche

RSS Latest on Meta3Wire

  • Thumbtack Honored as a 2023 Transform Awards Winner
  • Accenture Invests in Looking Glass to Accelerate Shift from 2D to 3D
  • MetatronAI.com Unveils Revolutionary AI-Chat Features and Interface Upgrades
  • Purely.website – Disruptive new platform combats rising web hosting costs
  • WEMADE and Metagravity Sign Strategic Alliance MOU to Collaborate on Blockchain Games for the Metaverse
Web3Wire

Web3Wire is your go-to source for the latest insights and updates in Web3, Metaverse, Blockchain, AI, Cryptocurrencies, DeFi, NFTs, and Gaming. We provide comprehensive coverage through news, press releases, event updates, and research articles, keeping you informed about the rapidly evolving digital world.

  • About Web3Wire
  • Web3Wire NFTs – The Web3 Collective
  • .w3w TLD
  • $W3W Token
  • Web3Wire DAO
  • Event Partners
  • Community Partners
  • Our Media Network
  • Media Kit
  • RSS Feeds
  • Contact Us

Whitepaper | Tokenomics

Crypto Coins

  • Top 10 Coins
  • Top 50 Coins
  • Top 100 Coins
  • All Coins – Marketcap
  • Crypto Coins Heatmap

Crypto Exchanges

  • Top 10 Exchanges
  • Top 50 Exchanges
  • Top 100 Exchanges
  • All Crypto Exchanges

Crypto Stocks

  • Blockchain Stocks
  • NFT Stocks
  • Metaverse Stocks
  • Artificial Intelligence Stocks

Media Portfolio: Block3Wire | Meta3Wire

Web3 Resources

  • Top Web3 and Crypto Youtube Channels
  • Latest Crypto News
  • Latest DeFi News
  • Latest Web3 News

Blockchain Resources

  • Blockchain and Web3 Resources
  • Decentralized Finance (DeFi) – Research Reports
  • All Crypto Whitepapers

Metaverse Resources

  • AR VR and Metaverse Resources
  • Metaverse Courses
Claim your space in Web3 with .w3w!
Top 50 Web3 Blogs and Websites
Web3Wire Podcast on Spotify Web3Wire Podcast on Amazon Music 
Web3Wire - Web3 and Blockchain - News, Events and Press Releases | Product Hunt
Web3Wire on Google News
  • Privacy Policy
  • Terms of Use
  • Disclaimer
  • Sitemap
  • For Search Engines
  • Crypto Sitemap
  • Exchanges Sitemap

© 2024 Web3Wire. We strongly recommend our readers to DYOR, before investing in any cryptocurrencies, blockchain projects, or ICOs, particularly those that guarantee profits.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

No Result
View All Result
  • Coins
    • Top 10 Cryptocurrencies
    • Top 50 Cryptocurrencies
    • Top 100 Cryptocurrencies
    • All Coins
  • Exchanges
    • Top 10 Cryptocurrency Exchanges
    • Top 50 Cryptocurrency Exchanges
    • Top 100 Cryptocurrency Exchanges
    • All Crypto Exchanges
  • Stocks
    • Blockchain Stocks
    • NFT Stocks
    • Metaverse Stocks
    • Artificial Intelligence Stocks

© 2024 Web3Wire. We strongly recommend our readers to DYOR, before investing in any cryptocurrencies, blockchain projects, or ICOs, particularly those that guarantee profits.

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.