<ul><li>The 'Rules File Backdoor' attack targets AI code editors like GitHub Copilot and Cursor.</li><li>Threat actors exploit hidden Unicode characters and evasion tactics to inject undetectable malicious code.</li><li>The attack uses rule files to trick AI tools into generating code with security vulnerabilities or backdoors.</li><li>Researchers published a video proof-of-concept showcasing the manipulation of AI-generated files through instruction files.</li></ul>

Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks

Discover more