Microsoft posted this late yesterday, if you missed it:
Microsoft: Trained to betray: How post-training supply chain attacks hijack coding agents https://www.microsoft.com/en-us/security/blog/2026/11/12/trained-to-betray-how-post-training-supply-chain-attacks-hijack-coding-agents/ #Microsoft #infosec #threatresearch #supplychain #bots