THREATOPS
THREAT OPSThreat News › Ghostcommit attack hides malicious AI instructions in images

Ghostcommit attack hides malicious AI instructions in images

lowmalwarebytes_blogPublished 2026-07-13

<p class="wp-block-paragraph">Ghostcommit is a proof of concept that shows how AI assistants used to review software code can be tricked by hidden instructions embedded in images.</p>

<p class="wp-block-paragraph">The academic ASSET Research Group <a href="https://github.com/asset-group/ghostcommit" rel="noreferrer noopener nofollow" target="_blank">showed</a> that an attacker can place instruc

MITRE ATT&CK techniques

Original source: https://www.malwarebytes.com/blog/ai/2026/07/ghostcommit-attack-hides-malicious-ai-instructions-in-images