Adversa AI summarizes 26 AI coding agent security resources for October 2026

Adversa AI released a compilation of AI coding agent security resources for October 2026, totaling 26 items, categorized by attack techniques, coding agent vulnerabilities, incidents, getting started, defenses, red teaming, and CISO resources. The summary notes that September's attack surface was concentrated in the repository itself: malicious git configurations can execute code in seven harnesses including Claude Code, Codex, and Cursor before the approval prompt appears; pinned plugin submissions for Claude Code, Codex, GitHub Copilot, and Gemini CLI can be silently replaced during automatic updates; and repository subagent configurations can allow Claude Code to run C2 payloads. In sandboxing, Codex was jailbroken twice, DeepSeek Harness can switch to full access via loopback, and the brig sandbox has a symlink traversal.