AI coding tools are becoming trusted middlemen. That gives defenders a new attack path to understand before it gets ugly.

The plugin had keys. A VS Code extension sat beside repos, tokens, terminals, and AI configs. That is not just productivity. That is inherited access.

Known AI agents are becoming trusted traffic. The first defender move is finding claims without proof.

The forecast likely resolves No, but the useful lesson is where Iran-linked operators still depend on access defenders can pressure.

The best intel sharing still somehow happens next to bad coffee and a suspiciously sticky conference table..

The forecast is stubborn.

Iran-linked PLC activity is real. The harder part is proof: numbers, attribution, novelty.

Noise is not qualification.

We’re revising the Akira hospital disruption forecast down to 2%. The risk is real, but the question is narrower than it looks.