Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

sophos

Malicious Claude Code extension distributed through Cursor marketplace

Oct 30, 2026 By Sophos X-Ops In Sophos
On October 29, 2026, Cursor reported that a malicious version of Anthropic’s Claude Code extension (2.1.313) was available in the Cursor extension marketplace between approximately 09:27 and 20:35 UTC. Cursor identified impacted macOS and Windows packages and estimates that up to 5,000 users were affected.
Read Post
Zenity

The First Questions That Matter: Triaging AI Agent Security Incidents

Oct 30, 2026 By Gary Hayslip In Zenity
I have lived through major incidents firsthand, including the urgent calls that come in the middle of the night. In my experience, the teams that contain damage quickly are not the ones with the most tools. They’re the ones that ask the right questions in the first hour.
Read Post
aikido

AI agent security in Kubernetes: Why prompt injection isn't the right term

Oct 30, 2026 By Nicholas Thomson In Aikido
This post is based on Mackenzie's conversation with Abdel Sghiouar on The Secure Disclosure podcast. Listen to the full episode or watch below. If you give an agent the run of your cluster, it can trace a problem through every layer of the stack faster than any on-call engineer. But that same reach makes the agent worth hijacking.
Read Post
salt security

Your AI Agent Was Manipulated. Can You Trace What Happened Next?

Oct 30, 2026 By Danielle Duhon In Salt Security
AI agents are moving into production fast. They read email, call tools, query databases, and trigger business processes, often chaining those steps in ways no single team designed. Building them has never been easier. Securing what happens after an agent is manipulated is the hard part. That is the gap Salt and AWS will tackle together on Tuesday, November 10, at 9:00 am PT (12:00 pm ET) in a live session: AWS + Salt: Build Fast, Stay Secure with Agentic AI. Save your seat →
Read Post
CrowdStrike

CrowdStrike Agent Graph Shows How Agents Act on the Endpoint

Oct 30, 2026 By Vanessa Villa In CrowdStrike
AI agents don't just answer questions anymore. They open files, use credentials, run code, install software, and run models locally, all at machine speed. Every one of those actions happens on the operating system. This is where attacks land, and where CrowdStrike Falcon Guardian excels: on the endpoint, at runtime.
Read Post

Tales From the Shadow AI | WatchGuard Webinar

Oct 30, 2026 By WatchGuard Technologies In WatchGuard
Join WatchGuard’s Corey Nachreiner and Marc Laliberte for a deep dive into Shadow AI breaches from 2025 and 2026. You’ll hear about an AI coding agent that wiped a live database during a code freeze and a hiring chatbot whose admin login was 123456. Then they'll show you how to find the same risks across every client you manage with WatchGuard Cloud Detection and Response (CloudDR).
View Video

What are AI Hallucinations?

Oct 30, 2026 By Arctic Wolf Networks In Arctic Wolf
AI hallucinations are outputs that sound accurate and authoritative but are false or invented. This Arctic Wolf video explains what AI hallucinations are, why they happen, and what they mean for cybersecurity. They happen because of incomplete data, data bias, lack of context, and processing complexity. AI predicts from patterns and doesn’t check its answers against reality. In security, the consequences include hallucinated threat assessments, incorrect remediation recommendations, fabricated indicators of compromise, wasted time, and increased risk.
View Video
Featured Post
AI Agents Are Rewriting the Rules of Identity Security

AI Agents Are Rewriting the Rules of Identity Security

Oct 29, 2026 By Jaime Guimerá Coll, AI SOC Architect In BlueVoyant
For years, identity security has been based on a fairly straightforward premise: organisations need to know who, or what, is accessing their systems, what they are authorised to do, and whether that access remains appropriate. However, the rise of autonomous AI agents has changed the game, and tore-up the traditional model of role-based access controls and privileged access management.
Read Post
kroll

Securing the Future of AI

Oct 29, 2026 By Kroll In Kroll
How Kroll and CrowdStrike Are Turning Innovation into Value for Customers At Fal.Con 2026 in Las Vegas, Kroll Managing Director Robb Mayeski joined CrowdStrike Vice President of Global Scale Partnerships Dan Danielli for a live interview with theCUBE, SiliconANGLE. The discussion explores how Kroll and CrowdStrike are helping organizations defend against AI-accelerated threats while adopting AI in a way that delivers measurable business value and strengthens cyber resilience.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.