Nearly half of all developers now use AI coding assistants, such as Cursor, GitHub Copilot, and Claude Code. In this session, watch a demonstration of an AI coding agent being directed to identify and exfiltrate sensitive source code to a personal GitHub repository. We then examine what DSPM and DLP controls catch, what they miss entirely, and why the controls your security team built were designed for a different era of threat. Backed by real data from Cyberhaven’s 2026 AI Risk Report. This isn’t theoretical; it’s happening in your engineering department today.