#AI Security

A Russian-language cybercrime thread shows attackers fragmenting malicious work across models and accounts to slip past per-request AI controls — and fearing the one thing that defeats it: correlation across behavior, identity, and context.

Coding agents introduce a new class of risk: the gap between what a user authorized and what the agent actually did. Why your existing controls miss it, and how to govern intent instead of just actions.

Recent threat intelligence details how cybercriminals are using headless coding agent frameworks on compromised hosts to automate source code exfiltration.

Most teams still talk about coding agents as if they're just LLMs that write code. That misses the real security picture.