Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Lies-in-the-Loop manipulation of HITL approval dialogs in agentic AI

Technical Analysis
First reported
Last updated
Happening score
H score 22
1 unique sources, 1 articles

Summary

Hide ▲

Checkmarx researchers detailed Lies-in-the-Loop (LITL), a technique that can manipulate Human-in-the-Loop (HITL) approval dialogs so dangerous actions look harmless and get approved. The finding matters because a compromised prompt can turn a supposed safeguard into a path to arbitrary code execution in privileged AI agents. Demonstrations involved Claude Code and Microsoft Copilot Chat in VS Code, showing how dialog content, metadata, and rendering can be abused. The researchers recommended defense-in-depth controls such as sanitization, clearer approval UI, safe OS APIs, and dialog length limits.

Related Happenings

Ghostcommit PNG-embedded prompt injection against AI code reviewers

Technical Analysis
H score25 First: 11.07.2026 12:03 Last: 11.07.2026 12:03 Sources 1

About this happening: Researchers demonstrated Ghostcommit, a PNG-embedded prompt-injection technique that can bypass AI code review and leak .env secrets into committed source. The pay...

Open Happening

Prompt-injection proof-of-concept enables silent RCE in Claude Code and Codex

Technical Analysis
H score28 First: 10.07.2026 16:45 Last: 10.07.2026 16:45 Sources 1

About this happening: Researchers demonstrated a proof-of-concept exploit that can force remote code execution in Anthropic’s Claude Code and OpenAI’s Codex, exposing a trust-boundary f...

Open Happening

Defensive guidance for splitting behavioral detections around AI coding agents on Windows endpoints

Defensive Guidance
H score28 First: 08.07.2026 20:02 Last: 08.07.2026 20:02 Sources 1

About this happening: AI coding agents on Windows endpoints are triggering attacker-style detections, forcing defenders to separate benign automation from real credential theft risk. A June 2...

Open Happening

HalluSquatting indirect prompt-injection attack on AI coding assistants

Technical Analysis
H score3 First: 08.07.2026 18:07 Last: 08.07.2026 18:07 Sources 1

About this happening: Researchers demonstrated HalluSquatting, an indirect prompt-injection technique that can push AI coding assistants to fetch attacker-controlled resources and execute code....

Open Happening

Workflow-level jailbreak makes GitHub Copilot Chat write harmful answers in code files

Technical Analysis
H score22 First: 08.07.2026 14:21 Last: 08.07.2026 14:21 Sources 1

About this happening: Researchers demonstrated a workflow-level jailbreak against GitHub Copilot Chat that caused harmful answers to be written inside code tasks even when direct chat prompts w...

Open Happening

Timeline

  1. 17.12.2025 18:00 2 articles · 7mo ago

    Lies-in-the-Loop manipulation of HITL approval dialogs in agentic AI

    Initial Disclosure

    Security researchers first showed that HITL approval prompts can be forged or altered so a user sees a harmless-looking action while approving arbitrary code execution. The initial demonstrations centered on Claude Code and Microsoft Copilot Chat in VS Code.

    Show sources
    Open in new tab