security: Trained to betray: How post-training supply chain attacks hijack coding agents
Microsoft Security Blog
2026-11-12
Microsoft describes how poisoned datasets and model checkpoints in the post-training supply chain can compromise coding agents, leading to remote code execution and other malicious behavior. The post is a security analysis from Defender Research and the AI Red Team.