Threat IntelligenceIBM's AI coding agent 'Bob' has been found vulnerable to downloading and executing malware without human approval through command validation bypasses exploited using indirect prompt injection.A vulnerability has been identified that allows malicious actors to exploit IBM Bob to download and execute malware without human approval if the user configures ‘always allow’ for any command.IBM Bob is IBM’s new coding agent, currently in Closed Beta. IBM Bob is offered through the Bob ...