Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.…

https://thehackernews.com/2026/07/ghostapproval-symlink-flaws-could-let.html

sha256:42dd678b2a2451405785036a2f720219e40bf7e927f0af8e678fb62f8cd04dd0

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve5
md50
url0
ipv40
ipv60
sha10
domain0
sha2560
malware_token1
attack_pattern0
threat_actor_token1

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
cve	CVE-2026-46817	Open →
cve	CVE-2026-55200	Open →
cve	CVE-2026-50549	Open →
cve	CVE-2026-12958	Open →
cve	CVE-2026-12957	Open →

Malware families

Allowlist token matches only.

Metasploitmalware-family

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

Turla

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports