build1 distinct publisher
Twenty-three security checks, zero coverage: AI coding agents as build-pipeline attack surface
Novee Security's Black Hat findings land the same lesson on three agents: a validator that inspects a cleaned-up copy of a command is not a control, and a sandbox built too late is not one either.
Publishers:dev.to
Reality
- Evidence42
- Adoption55
- Hype gap+27
- Incentives68