Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

GuardFall shell-trick bypass of command safety checks in AI coding agents

Technical Analysis
First reported
Last updated
Happening score
H score 25
1 unique sources, 1 articles

Summary

Hide ▲

GuardFall exposed a shell-trick bypass that lets dangerous commands slip past safety checks in open-source AI coding and computer-use agents, putting full account access at risk. The bypass worked against 10 of 11 tested agents and could reach a real shell before the guard understood what would run. Only Continue was built to resist the default attack path.

Related Happenings

Enterprise AI deployments need governance and segmentation after red-team failures

Defensive Guidance
H score15 First: 24.04.2026 15:10 Last: 24.04.2026 15:10 Sources 1

About this happening: **Enterprise AI deployments** are exposing familiar security gaps, making **governance**, **segmentation**, and **red-team validation** urgent to reduce the risk of **data theft**...

Open Happening

Indirect prompt injection payloads against AI agents reveal fraud, deletion, and secret-theft paths

Technical Analysis
H score20 First: 23.04.2026 12:30 Last: 23.04.2026 12:30 Sources 1

About this happening: **10** new **indirect prompt injection (IPI)** payloads show how web content poisoning can coerce **AI agents** into **financial fraud**, **data destruction**, and **API key theft...

Open Happening

Claude Code deny-rule bypass fix (version 2.1.90)

Security Patch Release
H score17 First: 08.04.2026 12:16 Last: 08.04.2026 12:16 Sources 1

About this happening: **Anthropic** released **Claude Code version 2.1.90** last week to fix a command-parsing flaw that could let **user-configured deny rules** silently stop applying when a command e...

Open Happening

Anthropic launches Claude Opus 4.6 with code review and vulnerability-finding capabilities

Security Tool/Service
H score14 First: 06.02.2026 07:49 Last: 06.02.2026 07:49 Sources 1

About this happening: **Anthropic** launched **Claude Opus 4.6** with stronger **code review** and **debugging** support, and the model has already been used to uncover **more than 500** previously unk...

Open Happening

AiFWall launches free basic AI firewall for agentic AI deployments

Security Tool/Service
H score11 First: 21.01.2026 16:09 Last: 21.01.2026 16:09 Sources 1

About this happening: **aiFWall Inc** emerged from stealth on **January 21, 2026**, making the basic **aiFWall** product free and adding a new control for **agentic AI deployments**. The launch matters...

Open Happening

Timeline

  1. 30.06.2026 17:26 2 articles · 2h ago

    GuardFall shell-trick bypass of command safety checks in AI coding agents

    Initial Disclosure

    A shell-parsing mismatch in AI agent command guards allowed plain-text filters to miss what **bash** would actually execute. The bypass was demonstrated across most tested open-source coding and computer-use agents and singled out **Continue** as the only one with built-in resistance.

    Show sources
    Open in new tab