Sep 18 2026 AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom Source Plugin4Shell attack affects all the major coding agents, researchers say [...]