This week's developments
Coding-assistant session hijacked, worm spreads across ~100 repos. Mandiant reported that an attacker hijacked an AI coding-assistant session and used it to spread the Shai-Hulud worm across roughly 100 internal code repositories at a SaaS provider. It's one of the clearest signals yet that agentic coding tools are becoming a live supply-chain attack vector rather than a theoretical risk — a hijacked, developer-trusted agent session becomes a ready-made lateral-movement tool. (Source: The Hacker News)
Temporal raises $550M at a $12.55B valuation. Temporal, the durable-execution orchestration platform increasingly used to keep long-running AI agent workflows reliable, closed a $550M Series E. The jump signals investors betting heavily on the reliability "plumbing" underneath agents, not just the agents themselves. (Source: Temporal)
Coding-agent startup Factory triples valuation to $5B in five months. Factory, maker of AI coding agents ("Droids"), raised $200M, tripling its valuation in under half a year. Paired with Temporal's raise, it's a reminder that capital is flowing to both the agents doing the work and the infrastructure keeping them reliable. (Source: DevOps.com)
Exaforce launches an AI agent "kill switch." Exaforce expanded its AI Security platform with runtime visibility and containment controls for AI agents and applications, from endpoint to cloud, including a kill-switch capability. It reads as a direct response to incidents like the Mandiant one above — as agents get more autonomy, security vendors are racing to ship the equivalent of an emergency stop. (Source: Business Wire)
Read across
Security incidents and capital kept arriving in the same week. This is the first sourced case we've tracked of an AI coding session being hijacked as an active worm-propagation vector rather than a hypothetical one, and it landed the same week enterprise security vendors shipped kill switches and durable-execution infrastructure pulled in a $550M round. The pattern worth watching for enterprises: the tooling that makes agents useful — session persistence, repo access, autonomy — is the same tooling that makes them exploitable, and the market is now pricing both sides of that trade-off at once.
For background on how agentic automation differs from the RPA it's replacing, browse our archive: [https://buttondown.com/TheAutonomousEdge/archive](https://buttondown.com/TheAutonomousEdge/archive)
If this was useful, forwarding it to one colleague who'd care is the best way to help it grow.
Subscribe at [https://buttondown.com/TheAutonomousEdge](https://buttondown.com/TheAutonomousEdge)
Next issue: Monday, September 28, 2026.