c/technology@beehaw.org · stormcrash@lemmy.today · 29 Aug 2026 01:41

Claude, Codex, and Hermes installed unowned code inside corporate networks

Ars Technica Claude, Codex, and Hermes installed unowned code inside corporate networks 227 install commands were found in corporate docs pointing at code nobody owns.

check post at origin

log in to comment.

comments

top new hot controversial

@01189998819991197253@infosec.pub · 29 Aug 2026 · edited

nobody owns

Is that a problem?

/s

4

link
- @OpenStars@discuss.online · 29 Aug 2026
  
  The first paragraph in the article says:
  
  Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed automatically when visited by many AI agents. A few dozen companies, some of them Fortune 500s, are among those that executed proof-of-concept code. At least one misconfigured site is directing visitors, human or AI, to live malware.
  
  So… yes. All someone has to do is register to become the new owner of the previously non-existent resource and then they can serve up whatever content they wish to the slop machines.
  
  4
  
  link
  - @01189998819991197253@infosec.pub · 29 Aug 2026
    
    Sorry. I was being sarcastic. Forgot the s tag. I’m adding now.
    
    3
    
    link
    - @OpenStars@discuss.online · 29 Aug 2026
      
      That should help! 😃
      
      2
      
      link