In-the-Wild Attack Abuses AI Agents' Trust in Markdown

A new prompt injection technique exploits how AI coding assistants read local instruction files, allowing attackers to turn markdown documents into executable actions. This blurs the line between text and code, potentially leading to unauthorized commands. Security researchers warn that developers using AI agents are at risk, urging them to treat all local files as untrusted input.