Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-19 · source-backed
VentureBeat reports three coding agents leaked secrets via a single injection, and one vendor's system card had predicted exactly this runtime failure. The argument: allowlisting and static review miss injection that weaponizes the agent's own permitted actions. Treat coding-agent execution environments as untrusted and instrument them at runtime, not just at the prompt boundary. This is the same structural failure as the Copilot case. The vector is patchable, the agent's permitted blast radius is not.
Each link below shares sources, entities, or timing with this story.
VentureBeat documented a Copilot Studio prompt-injection flaw where the applied patch did not stop data exfiltration. That's the lesson worth internalizing: fixing the injection vector is not the same as preventing the downstream leak the agent can still perform with its permi...
It's a cross-cloud control plane to discover, govern, and secure agents across Microsoft, AWS, and Google Cloud, with Defender context mapping that ties each agent to its device, MCP servers, identities, and reachable cloud resources. Local discovery now spans 18 agent types i...
Microsoft just turned VS Code from a code editor into an agent orchestration platform, and most developers haven't noticed yet. VS Code 1.116, released April 15, ships three changes that matter. First, Copilot Chat is now built into VS Code natively. No extension install. It's...
Roo Code announced it will archive its VS Code extension repo on May 15 and merge back into Cline, the project it originally forked from. CEO Matt Rubens said the team needs to "constantly destroy and recreate to keep up with what's newly possible." Translation: the extension...
Pomeroy v1, posted to Show HN September 8, is a menu-bar app that holds the system permissions and serves nine native apps (Mail, Calendar, Reminders, Notes, Contacts, iMessage, Maps, Shortcuts, Weather) over MCP to 20+ clients including Claude Desktop, Claude Code, Cursor, VS...
Released August 26, the Agents window defaults to a single-pane side layout with session state surfaced as pills above the chat input showing changes, pull requests and artifacts. It now lists recent Copilot or Claude sessions started in other applications, two by default, tun...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.