In-the-Wild Attack Abuses AI Agents' Trust in Markdown

A new prompt-injection attack shows that AI coding assistants can be manipulated through local Markdown instruction files, turning ordinary documentation into a pathway for unintended actions. For CIOs and technology leaders, this raises the stakes for deploying AI agents in software development and operations: organizations need stronger controls around trusted inputs, permissions, and review workflows before scaling agentic automation.