Tag

#least privilege

2 posts tagged 'least privilege'

AI Coding Extension Supply Chain Attack: Lessons from the Claude Code Backdoor

Analyzing the October 2026 supply chain attack where a malicious loader was injected into the official Claude Code VS Code extension in an attempt to install an SSH backdoor, and summarizing how developers and organizations can verify and isolate AI coding extensions.

October 31, 2026

#AI coding security #supply chain attack #Claude Code

Security

General-purpose VMs Are Not Enough: Redesigning Isolation for AI Agent Execution Environments

In an era of directly running code generated by AI coding agents, this post examines the limitations of general-purpose VMs and proposes a least-privilege isolation strategy based on gVisor, Firecracker, and WebAssembly.

August 30, 2026

#AI agent #vibe coding #security