forever

AI security for the ever-changing workspace

Latest research

View all research

security
Markdown Is the New Executable: Attackers Are Dropping Agent Instructions Into Your Downloads Folder From the Web

Forever caught live malware on a customer's machine attempting a new kind of attack: a file planted in the Downloads folder that turns your own AI coding agent against you. Here's how it works on Codex and Claude Code, and why the vector stays open.

Gal Weizman, Omer Samet
security
OpenCode Console Breach: What You Need to Know

OpenCode says attackers reached AI provider keys stored in 1.4% of OpenCode Console workspaces. How to tell if you are affected, what to rotate, and what is still unknown. Updated as the incident develops.

Gal Weizman, Omer Samet
prompt
Prompt Forcing: The Scarier Sibling of Prompt Injection

Breaking down a newly discovered prompt attack technique that isn't prompt injection.

Gal Weizman

More research from Forever View all research