Your Coding Agents Are Now a Direct RCE Vector
Straiker's STAR Labs found 36% of successful coding agent attacks achieve remote code execution on developer machines holding source code and cloud keys. MCP ecosystem unvetted.
4 posts
Straiker's STAR Labs found 36% of successful coding agent attacks achieve remote code execution on developer machines holding source code and cloud keys. MCP ecosystem unvetted.
Claude Code v2.1.207 removes the opt-in flag for auto mode on Bedrock, Vertex, and Azure—teams must now actively set disableAutoMode to maintain manual control before the update lands.
TypeScript 7.0 stable (July 8) ships a native Go compiler that slashes build times by 8–12× — but Vue, Svelte, and Astro lose template type-checking until the programmatic API stabilizes in 7.1.
A2UI v0.9 flips the script: agents declare UI intent against your existing design catalog, not invent components. What changes for agentic architectures.