Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast

KloudStax's CTO Vinay Thakker unveiled the first ten lines of a new command policy for AI coding agents, detailing strict identity and permission controls for automated code generation. For website owners, this policy signals that AI coding bots will soon be required to prove their identity and adhere to predefined command scopes before they can interact with site infrastructure or modify content. Retail sites, especially those still recovering from recent refrigeration‑system cyberattacks, must anticipate AI agents that could otherwise exploit open APIs or content management systems to inject malicious code or scrape sensitive data. The explicit command limits mean that any AI bot lacking proper credentials will be blocked, reducing the attack surface for automated exploits. **Actionable tips:** 1. Update your llms.txt file to list only verified AI agents (e.g., “KloudStax‑AI‑Coder/1.0”) and deny all others with a wildcard “*”. 2. Implement token‑based identity verification on endpoints that AI bots may access, matching the new command policy’s requirements. 3. Use llmscentral’s bot‑traffic dashboard to monitor for unauthorized AI requests and set alerts for any deviation from the approved command set.