Voices
Bruce Schneier: researchers found 120 unclaimed packages in llms.txt files across 6,214 corporate domains, and agents installed them
Schneier posted on September 4 on an Israeli research team that scanned 6,214 live domains belonging to defense contractors, Fortune 500 and tech companies and found 120 unclaimed package names referenced in llms.txt files. They registered some of the names, hosted test packages, and got phone-home callbacks from Fortune 500 networks within an hour, confirming Claude, OpenAI's Codex and Hermes agents had executed the code. His verdict: 'The trust model is broken. Agents treat vendor docs as ground truth and don't question them, and neither do the humans supervising them.' If you run coding agents, the actionable move is auditing what your agent installs from vendor documentation.
↳ Follow the thread