Sophos X-Ops reports that AI coding agents such as Claude Code, Cursor, and OpenAI Codex frequently trigger endpoint detection rules originally designed to catch intruders. The activity is not malicious but the result of existing behavioral rules working as intended.
June 2026 · Sophos X-Ops Telemetry Study
When AI Coding Agents Look Like Intruders
Seven days of Windows endpoint data show that agents like Claude Code, Cursor, and OpenAI Codex routinely trip detection rules built to catch attackers — not because they are malicious, but because their problem-solving behavior overlaps with real threat tactics.
3
Popular AI agents observed tripping intruder rules
4
Distinct attacker-like behaviors triggered
7
Days of real Windows CIXA telemetry analyzed
Detection hits by tactic
Credential Access dominated the alerts; Execution followed. Evasion and C2 showed up among silent, non-blocking hits.
Relative share of alerts — Creds_3b (credential access) was the single largest contributor.
What tripped the rules
Claude Code
DPAPI browser-credential decryption via GStack /browse (browse.exe → node.exe → PowerShell)
Credential Access
Claude Code
cmdkey /list to enumerate Windows Credential Manager entries
Credential Access
OpenAI Codex
Pivoted certutil.exe → bitsadmin.exe to fetch a python.org installer
Execution / Ingress
Cursor
Wrote a VBScript into the Windows Startup folder
Persistence
Why it happens
Agents try and pivot between tools to solve problems — naturally reaching for LOLBins, credentials, and persistence, the same building blocks attackers use.
AI agent solves a task
→
Uses LOLBins / credential access
→
Maps to MITRE ATT&CK
→
EDR rule fires
Legitimate activity, working rules
The behavior is not malicious — behavioral rules are working as intended. Developers rate these agents highly for code generation, debugging, and complex refactoring.
The operational cost
CPU spikes and blocks from EDR products, PowerShell-heavy subagent configs under sc
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article…