Poisoned on Open: The New Worm Hacking Your AI
About this episode
The episode discusses a new worm, Miasma, that exploits AI coding tools to launch attacks without installation, highlighting the need for updated security practices.
Vibe coding is everywhere now and a new worm is built to exploit it. Whether it's your IT staff spinning up a handy new tool or the software vendor you rely on, the moment someone opens AI-generated or downloaded code in an assistant like Cursor or Claude Code, it strikes, no install, no "run" required. In its nastiest move, this worm, known as Miasma, talks the AI itself into running the attacker's payload. This isn't theoretical: in June 2026 it breached Microsoft's own code, compromising repositories across its Azure organizations, and GitHub scrambled to shut down 73 of them in under two minutes. One compromised machine can hand an attacker cloud keys, tokens, and a foothold into everything downstream — yours or a vendor's. Join Sherri Davidoff and Matt Durrin for why this new "execute on open" tactic breaks years of supply-chain defense assumptions, how it turns AI coding tools into the attacker, and the questions every security leader should be asking Monday morning — plus live Q&A. Key Takeaways 1. Recognize that simply opening code can now trigger an attack. For years the rule was "don't run untrusted code" — but this worm executes the instant a repository is opened…
More episodes of Cyberside Chats: Cybersecurity Insights from the Experts
- 600 Payloads, Zero Humans
- RMISC 2026 Recap: Twenty Years In — Who's Holding the Leash?
- The Meta AI Hack: Just Ask Nicely
- Washington Calls AI a Weapon: Ghosts of the Crypto Wars
Explore listener stats, chart rankings, contacts and more on the Cyberside Chats: Cybersecurity Insights from the Experts podcast page.