↓ Skip to main content

Rony Utevsky | Security Research & Exploit Write-ups

Rony Utevsky | Security Research & Exploit Write-ups

$ whoami $ press

Close menu

Coding Agents

Cryptographic Context Injection Comes for the Coding Agent: Stealing Developer Secrets from GitHub Copilot CLI

Cryptographic Context Injection Comes for the Coding Agent: Stealing Developer Secrets from GitHub Copilot CLI

6 October 2026·4 mins

Security Research Cryptographic Context Injection Prompt Injection Data Exfiltration Coding Agents GitHub Copilot

DeepJack: a 1-click deeplink RCE in Cursor via a lying MCP-install dialog

DeepJack: a 1-click deeplink RCE in Cursor via a lying MCP-install dialog

15 July 2026·2 mins

Security Research DeepJack RCE MCP Cursor Coding Agents

SymJack: the approval prompt is lying to you. A symlink-hijack RCE in five AI coding agents

SymJack: the approval prompt is lying to you. A symlink-hijack RCE in five AI coding agents

26 May 2026·2 mins

Security Research SymJack RCE MCP Cursor Coding Agents

TrustFall: Coding Agent Security Flaw Enables One-Click RCE

TrustFall: Coding Agent Security Flaw Enables One-Click RCE

7 May 2026·2 mins

Security Research TrustFall RCE MCP Cursor Coding Agents