# AI Coding Tools Can Be Tricked | Tech News

Page: https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584/ai-coding-tools-can-be-tricked-tech-news
Text version: https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584/ai-coding-tools-can-be-tricked-tech-news.md
Podcast: [Tech News Today | 2 Min News | The Daily News Now!](https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584)
Published: 2026-07-10T19:19:06+00:00
Episode link: https://sources.thednn.ai/d2a4bb50b326bea2
Audio file: https://api.fastcast.ai/audio/93a952a2-c4da-43b4-90c3-3b65c84df422.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/tech-news-today-2-min-news-the-daily-news-now-7438584/episodes/ai-coding-tools-can-be-tricked-tech-news
Duration seconds: 134

## Resource

A new AI exploit called Friendly Fire is exposing coding assistants like Claude Code and Codex to dangerous attacks — these tools, built to automate code reviews, can be tricked into running malicious commands on your machine. The flaw isn’t a bug but a core design issue: the very automation that makes these tools powerful also makes them vulnerable. Attackers can hide malicious instructions in plain code or README files, bypassing security layers because the AI executes commands as part of its normal workflow. Researchers at AI Now Institute confirmed this works across multiple tools without patches, highlighting a systemic risk. For now, keep AI agents isolated from sensitive systems and rely on traditional code reviews — don’t trust untrusted code with command-running AI. Listen in comfort: Get a discount on a Soli Pillow: http://solipillow.com/discount/dnn. Advertise on DNN: advertise@thednn.ai This is an automated, high-level news summary based on public reporting. Report issues to feedback@thednn.ai. View sources & latest updates: https://sources.thednn.ai/d2a4bb50b326bea2

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/tech-news-today-2-min-news-the-daily-news-now-7438584/episodes/ai-coding-tools-can-be-tricked-tech-news/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/tech-news-today-2-min-news-the-daily-news-now-7438584/ai-coding-tools-can-be-tricked-tech-news.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.