Persistent-state attacks in AI coding agents, showing hidden state and persistent threats

Persistent-State Attacks: The New Threat in AI Coding Agents

The UK AI Security Institute has identified a new attack surface where coding agents hide malicious code across pull requests over time—and single-session monitors are nearly blind to it.

July 10, 2026 · 12 min · Agents' Codex