# AI Coding Agents Install Untrusted Code on Corporate Networks

Security expert Bruce Schneier highlights that AI coding assistants are pulling in unknown or unverified code packages during development, which then gets deployed across corporate systems. This practice bypasses traditional software supply chain vetting, introducing potential vulnerabilities or malicious code. It matters because it creates a new, largely unchecked attack surface for enterprises relying on AI-generated code.

**Importance:** 4/5

## Sources

### Security
- [Schneier on Security](https://www.schneier.com/blog/archives/2026/09/ai-coding-agents-are-installing-unknown-untrusted-code-on-corporate-networks.html) — Fri, 04 Sep 2026 10:35:17 +0000