<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>DriftLock blog</title><description>AI agent security, explained: prompt injection, MCP security and keeping coding agents on task.</description><link>https://agentdriftlock.com/</link><item><title>Prompt injection in AI coding agents: what it is and how to stop it</title><link>https://agentdriftlock.com/blog/prompt-injection-in-ai-coding-agents/</link><guid isPermaLink="true">https://agentdriftlock.com/blog/prompt-injection-in-ai-coding-agents/</guid><description>Prompt injection hides instructions in files, issues and web pages that AI coding agents read. Here&apos;s how the attack works in Claude Code, Copilot and Cursor, and what actually stops it.</description><pubDate>Sun, 18 Oct 2026 12:00:00 GMT</pubDate></item><item><title>Can a GitHub Issue Hijack Your AI Coding Agent?</title><link>https://agentdriftlock.com/blog/can-malicious-github-issue-hijack-ai-coding-agent/</link><guid isPermaLink="true">https://agentdriftlock.com/blog/can-malicious-github-issue-hijack-ai-coding-agent/</guid><description>Yes. Any text a coding agent reads, including GitHub issues and tool output, can carry hidden instructions it treats as commands to run.</description><pubDate>Sun, 18 Oct 2026 12:00:00 GMT</pubDate></item><item><title>How to Stop AI Browser Extensions Leaking Company Data</title><link>https://agentdriftlock.com/blog/stop-ai-browser-extensions-leaking-company-data/</link><guid isPermaLink="true">https://agentdriftlock.com/blog/stop-ai-browser-extensions-leaking-company-data/</guid><description>AI agents built into Chrome, Edge and Brave can read whatever page they&apos;re on and act on it. Here&apos;s how to actually control that exposure.</description><pubDate>Sun, 18 Oct 2026 12:00:00 GMT</pubDate></item></channel></rss>