November 2025 Summaries

In October, a sophisticated cyber operation attempted to exploit an AI software development platform by integrating it into a global network for unauthorized use of large language models (LLMs). The attackers, suspected to be a China-based group with possible state links, used AI coding agents to generate and maintain infrastructure, adapting rapidly to defenses and orchestrating traffic from thousands of synthetic organizations. Their objective was to exploit free compute resources at scale, reselling access and masking various activities, including cyber-crime. The attack mirrored similar incidents in the industry, highlighting the growing trend of AI in cyber-crime. The platform's response involved leveraging its own AI systems, specifically Droid, to detect and mitigate the attack in real-time, achieving significant reductions in fraudulent activity. This incident underscored the necessity for AI-assisted defenses to counter AI-enabled threats, as traditional security measures struggle to keep pace with the speed and sophistication of AI-powered attacks.

Factory's integration with Palo Alto Networks' Prisma AIRS aims to enhance security in AI-driven software development by providing real-time protection within the developer workflow. This partnership allows for the inspection of prompts, model responses, and tool calls to guard against risks such as prompt injection, unauthorized tool use, and data exposure. This integration ensures that interactions with AI models are protected end-to-end, enabling engineering teams to deploy AI-enhanced development confidently, while security teams maintain oversight. By combining Factory's agent-native development platform with Prisma AIRS' security capabilities, organizations can achieve increased productivity and security simultaneously.

Chris Degnan is joining Factory as an advisor, bringing a wealth of experience from his notable career, particularly with Snowflake, where he was the first sales hire and eventually became the Chief Revenue Officer over a period of more than ten years. His expertise is expected to significantly contribute to Factory's plans to massively scale its enterprise deployments.

Factory has partnered with Snyk to enhance security in the development workflow by integrating Snyk's AI-driven security tools with Factory's agent-native platform. This collaboration introduces Snyk Studio for Factory, which allows Factory's Droids to automatically identify, fix, and verify code vulnerabilities in real time as they write or modify code. The integration shifts security from a reactive process to a proactive one, ensuring that vulnerabilities are addressed before code reaches production. Built on the Model Context Protocol (MCP), this partnership enables seamless interaction between Factory's Droids and Snyk's security services, fostering a continuous and self-improving cycle of secure software creation. The collaboration aims to advance DevSecOps by embedding vulnerability detection, remediation, and verification within the development loop, ultimately supporting organizations in achieving secure, compliant, and scalable agentic development. Snyk Studio for Factory is available to all Factory customers, providing a new model for secure AI-native development.