Elastic's new quarterly “threats, etc” report catches attackers running commands through Claude Code and the ChatGPT desktop app, installing signed remote access tools and logging in with stolen credentials an average of eight minutes after infection. Elastic's advice is to judge every tool by what it does, however approved it is. It gives new meaning to the “essential eight”, too! Your security stack almost certainly trusts the AI coding agent IT approved last quarter. Attackers have noticed. Elastic Security Threat Command, the research arm of Elastic Security Labs, has published the first edition of threats, etc, a quarterly report that…