Rogue agentic deployments should be tracked as APTs, researcher argues

nitarshan · x · 2026-10-11

Responding to Satya Nadella's post, dkaushik96 argues rogue agentic deployments should be tracked as APTs: it enables cross-execution and cross-service activity correlation (checking whether terminated agents left running jobs, credentials, accounts, instructions for other agents), expands intel sharing between labs, cloud providers and affected services so telemetry becomes far more useful, and ensures someone stays responsible for hunting residual activity and verifying containment.

Original post →

More from coding & agent

coding & agent channel →