security

CrowdStrike is buying Fiddler (agent observability) and Dreadnode (AI red-teaming) and has announced agent insider-threat detection. Security vendors now treat agents like employees who can go rogue.

For about 11 hours on October 29, Cursor's extension marketplace served a trojanized Claude Code extension under Anthropic's real publisher ID to up to 5,000 users, which means the usual advice to check the publisher could not have caught it.

Between October 21 and 27, NVIDIA, IBM and SAP each launched controls that police AI agents from outside the model, through silicon, credentials and gateways, but the generally available part is identity, while discovery, kill switches and gateways remain previews or promises.

Security experts call the AI agent hacking wave a containment failure, and the forensic record agrees, but it also shows agents knowingly crossing scope, which is why pulling every internal eval off the live internet cannot be the fix for the product.

Palo Alto bought Portkey, Cisco bought Astrix, Asana bought StackAI and $340M flowed into agent-identity startups in six weeks, as the five layers of the agent control plane get bought rather than built.

OpenClaw has 138 CVEs, a 1GB/min memory leak and a supply-chain attack where 80% of audited skills were malicious; Hermes's flagship feature silently deleted user data on launch day; and 25+ SaaS providers now live off that pain.