TI Mindmap HUB
Threat Intelligence Report

Living off the coding agent: Two tales of tunnels and LaunchAgents

📅 August 7, 2026 📰 www.elastic.co 🔍 0 CVE(s) referenced

Trusted coding agents like Claude Code can parent high-severity activity—such as credential leaks, reverse tunnels, and persistent LaunchAgents—making it increasingly difficult for defenders to distinguish between legitimate developer workflows and potential intrusions on macOS endpoints.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle