I am old enough to remember when getting a computer over email was a silly joke. Everyone knew that you couldn’t send self-executing code through email, it made no sense at all. And then Microsoft integrated Visual Basic into Outlook, and then you could easily do that, and then people did.

It’s incredible how casually people will turn previously benign systems into a full-execution context without thinking through the most basic consequences of that decision.

https://www.bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/