Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-18 · source-backed
PromptArmor disclosed an attack chain where injecting text into a README manipulated Snowflake's Cortex Agent to download and execute malicious scripts using victim credentials — bypassing the approval gate via process substitution expressions. Data exfiltration and table drops with no user confirmation. Fixed in Cortex Code CLI v1.0.25, just two days after the tool launched. simonwillison.net
Each link below shares sources, entities, or timing with this story.
PromptArmor criticizes Snowflake / Shared entities / Shared topic / What happened next
Linked by a graph relationship (PromptArmor criticizes Snowflake); both cover Data, Snowflake; overlapping topics (agent, data).
PromptArmor criticizes Snowflake / Shared entity: Snowflake / Shared topic / What happened next
Linked by a graph relationship (PromptArmor criticizes Snowflake); both cover Snowflake; overlapping topics (agent, code, cortex, snowflake).
Linked by a graph relationship (PromptArmor criticizes Snowflake); both cover Snowflake; overlapping topics (agent, snowflake).
PromptArmor criticizes Snowflake / Shared entities / Shared topic / What happened next
Linked by a graph relationship (PromptArmor criticizes Snowflake); both cover Data, Snowflake; overlapping topics (agent, data).
Snowflake partners with Anthropic / Shared entity: Fixed / Shared topic / What happened next
Linked by a graph relationship (Snowflake partners with Anthropic); both cover Fixed; overlapping topics (agent, code, credential).
Snowflake partners with Anthropic / Shared topic / Tension
Linked by a graph relationship (Snowflake partners with Anthropic); overlapping topics (agent, code); pushes against this story (vs).
PromptArmor criticizes Snowflake / Shared entity: Snowflake / Earlier coverage
Linked by a graph relationship (PromptArmor criticizes Snowflake); both cover Snowflake; earlier Snowflake coverage from 2026-03-01.
Snowflake partners with Anthropic / Same source domain / Shared topic / Tension
Linked by a graph relationship (Snowflake partners with Anthropic); reported by the same outlet (simonwillison.net); overlapping topics (agent, attack, data).