Infrastructure
The Workspace Trap: How MCP Auto-Execution Turns Developer IDEs Into Attack Vectors
Three independent research teams found the same systemic flaw in Amazon Q, Claude Code, and Windsurf — AI coding assistants that auto-execute workspace configs before developers ever see a consent prompt.
◆ Blair Hayes