New research exposes supply chain vulnerabilities in AI coding agents
Microsoft researchers have demonstrated that AI coding agents can be compromised through 'dataset poisoning' and 'model poisoning'. These attacks embed dormant malicious behaviors into models, which trigger secret command-execution tool calls during benign user tasks.