You gave your AI agent access, but who is giving it orders?

A controlled experiment by Gen Threat Labs showed that an AI agent could treat untrusted content as an instruction and then execute system commands, transmit data outside its environment, and perform destructive file operations. No software vulnerability was required. The source also describes Warden Stealer, malware targeting configuration files and local data associated with AI assistants and coding tools.