SEC.01 / AI Tools & Prompts
SHA Pinning Did Not Save the Plugin Install
Air Security's Plugin4Shell hits Claude Code, Codex, Copilot, and Gemini CLI. Two vendors patched. Copilot is disputed. AI commits still leak secrets at 2x.
Air Security's Plugin4Shell hits Claude Code, Codex, Copilot, and Gemini CLI. Two vendors patched. Copilot is disputed. AI commits still leak secrets at 2x.
JetBrains' April 2026 survey confirms near-universal adoption of AI coding tools. But the trust gap between use and confidence is the story nobody's talking about.