--- title: How AI Coding Tools Crushed the Endpoint Security Fortress description: Security researcher Oded Vanunu of Check Point Software presented at RSAC 2026, arguing that AI coding assistants like Claude Code, OpenAI Codex CLI, Cursor,... canonical: https://daily.dev/posts/how-ai-coding-tools-crushed-the-endpoint-security-fortress-oivfawpcr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How AI Coding Tools Crushed the Endpoint Security Fortress | daily.dev og:description: Security researcher Oded Vanunu of Check Point Software presented at RSAC 2026, arguing that AI coding assistants like Claude Code, OpenAI Codex CLI, Cursor,... og:url: https://daily.dev/posts/how-ai-coding-tools-crushed-the-endpoint-security-fortress-oivfawpcr og:image: https://api.daily.dev/og/posts/oIVFAwpCR.png og:image:alt: How AI Coding Tools Crushed the Endpoint Security Fortress og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How AI Coding Tools Crushed the Endpoint Security Fortress **[Dark Reading](https://daily.dev/sources/dr)** · 6 min read · 1 upvotes · 0 comments ## Summary Security researcher Oded Vanunu of Check Point Software presented at RSAC 2026, arguing that AI coding assistants like Claude Code, OpenAI Codex CLI, Cursor, and Google Gemini CLI have systematically dismantled decades of endpoint security progress. These tools require broad local filesystem access and high privileges, making them invisible to EDR and other security products. His team disclosed six CVEs across these tools, including MCP consent bypasses, code injection via .env/.toml config files, and a 'swap attack' in Cursor that replaces approved commands with malicious payloads. A key finding is that attackers no longer need traditional malware — they can embed malicious instructions in configuration files like .json, .env, or .toml. Mitigations recommended include auditing shadow AI usage, sandboxing AI shell tasks, and adopting a 'Configuration = Code' zero-trust policy for developer workstations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISOs in a Pinch: A Security Analysis of OpenClaw](https://daily.dev/posts/cisos-in-a-pinch-a-security-analysis-of-openclaw-wq3pmvkrr) · Trend Micro · 0 upvotes · 0 comments - [How AI Assistants are Moving the Security Goalposts – Krebs on Security](https://daily.dev/posts/how-ai-assistants-are-moving-the-security-goalposts-krebs-on-security-rs1kf0tym) · Krebs on Security · 1 upvotes · 0 comments - [Claude's collaboration tools allowed remote code execution](https://daily.dev/posts/claude-s-collaboration-tools-allowed-remote-code-execution-jt8sizuec) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#appsec](https://daily.dev/tags/appsec), [#mcp](https://daily.dev/tags/mcp), [#ai-coding](https://daily.dev/tags/ai-coding), [#claude-code](https://daily.dev/tags/claude-code) [View this post on daily.dev](https://daily.dev/posts/how-ai-coding-tools-crushed-the-endpoint-security-fortress-oivfawpcr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How AI Coding Tools Crushed the Endpoint Security Fortress","url":"https://daily.dev/posts/how-ai-coding-tools-crushed-the-endpoint-security-fortress-oivfawpcr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-ai-coding-tools-crushed-the-endpoint-security-fortress-oivfawpcr"},"datePublished":"2026-03-24T21:29:07.076Z","dateModified":"2026-03-24T21:29:38.523Z","description":"Security researcher Oded Vanunu of Check Point Software presented at RSAC 2026, arguing that AI coding assistants like Claude Code, OpenAI Codex CLI, Cursor,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a1a930dcb4c37e1b864f2eea29b32e41?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a1a930dcb4c37e1b864f2eea29b32e41?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-ai-coding-tools-crushed-the-endpoint-security-fortress-oivfawpcr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,appsec,mcp,ai-coding,claude-code","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"How AI Coding Tools Crushed the Endpoint Security Fortress"}]} ```