THREATOPS
THREAT OPSThreat News › AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks

medschneierPublished 2026-09-04

<p>We cannot forget that AI coding agents are <a href="https://arstechnica.com/security/2026/08/claude-codex-and-hermes-installed-unowned-code-inside-corporate-networks/">not yet trustworthy</a>:</p> <blockquote><p>Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies. Of the 8,265 llms.txt and llms-full.txt file

Indicators of compromise

Original source: https://www.schneier.com/blog/archives/2026/09/ai-coding-agents-are-installing-unknown-untrusted-code-on-corporate-networks.html