Reported by 2 outlets
Researchers Execute Code Inside Fortune 500 Companies via AI Agent llms.txt Files
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Researchers Execute Code Inside Fortune 500 Companies via AI Agent llms.txt Files
gbhackers.com · 46d ago · August 28th, 2026
Security researchers have shown that AI coding agents can be manipulated into installing attacker-controlled packages by following instructions found in organizations’ own llms.txt files. This research emphasizes how agent-readable documentation can transform unverified package references, expired domains, and abandoned cloud subdomains into execution paths within enterprise environments. Researchers Execute Code Inside Fortune 500 Companies The […] The post Researchers Execute Code Inside Fortune 500 Companies via AI Agent llms.txt Files appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
AI Agent Instruction Files Let Attackers Execute Code Inside Fortune 500 Networks
cyberpress.org · 46d ago · August 28th, 2026
A newly disclosed novel supply chain attack vector built entirely from publicly available, legitimate infrastructure: LLM.txt files. In a controlled experiment, Alon Hertz registered the names of unclaimed packages referenced in official corporate instruction files and had code execute within a Fortune 500 network within four minutes. llms.txt (and llms-full.txt) are emerging root-level files, similar to robots.txt, that companies publish to guide AI agents toward documentation, APIs, and installation commands. AI Agent Instruction Files Google has institutionalized the format through a Lighthouse “ Agentic browsing audits ” category in Chrome DevTools, accelerating adoption across the web. The research team resolved 8,565 llms.txt files across 6,214 live domains, representing roughly 15,000 companies surveyed, spanning tech giants, fintechs, and defense contractors. The critical flaw isn’t misconfiguration or typosquatting; it’s abandonment. Google’s own tooling (Source: Alon Hertz) Alon Hertz found 237+ instances in which official files instructed agents to install exact-match package names or to visit domains that were never actually registered by the vendor. Names were “printed in black and white” but simply unclaimed on PyPI, npm, RubyGems, NuGet, crates.io, and Packagist, or as expired subdomains on Render, Vercel, Fly, and Netlify. Alon Hertz claimed these package names and embedded a benign phone-home beacon.