Section
Research
Threat intelligence and technical research from vendor labs, coordination centers and independent researchers.
5 matching records.
-
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor…
-
Malicious Claude Code extension distributed through Cursor marketplace
Categories: Threat Research Tags: advisory, Cursor
-
Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)
We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8&#;x26;#;xc2;&#;x26;#;xa0;of the most popular AI coding assistants…
-
Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents
Community-built AI agents, skills, and MCP servers are landing in SOC workflows fast. Here’s what the Exchange Inspector tests before a listing earns its vetted tag on the CyberAgents Exchange. Three tools have already passed.…
Reuse this view
Same filters as JSON: /api/items?category=research&window=30d&vendor=Anthropic&limit=100. RSS for this section: feed.xml.