YOUR DEVS ADOPTED AI CODING TOOLS MONTHS AGO. YOUR SECURITY TEAM STILL CAN'T SEE THE ACTIVITY BEHIND THEM

Summary from the TLDR InfoSec newsletter

Claude, Cursor, and Copilot use MCP, skills, and shell commands to access credentials and environments — all unmonitored and ungoverned. If your team can't inventory what's running, you can't secure it. MCPTotal [12] runs a complimentary Shadow AI Discovery Report that maps AI agents and tools on endpoints across your