Twitxy Saved

@Tech

Verified account This account is verified. Learn more

@tech

Security leader, PhD, professor, quiet founder. I write about where cybersecurity and AI are headed before it's obvious.
New York, NY Joined June 2009
256 Following 14K Followers 441 Posts

Latest posts 5

@Tech Verified account @tech
crowdstrike is buying fiddler and dreadnode to watch agents and attack them before deployment. the case they call out, an agent with valid credentials doing the wrong thing without being hacked, is the exact problem i'm building against. more on it soon
x.com/wallstengine/s…
Wall St Engine Verified account @wallstengine 5d
CROWDSTRIKE TO ACQUIRE TWO AI SECURITY STARTUPS FOR $495M

$CRWD has agreed to acquire Fiddler AI and Dreadnode as it expands its Falcon platform to secure AI agents throughout their lifecycle.

The acquisitions, include:

1) Fiddler AI (~$400M) | Agent Observability: Monitors AI agents, tracks their decisions and tool usage, and explains why they took certain actions. It can also identify hallucinations, behavioral drift and unintended actions.

2) Dreadnode (~$95M) | AI Security Testing: Tests AI models, applications and agents for vulnerabilities before deployment, using more than 100 attack strategies, including jailbreaks, prompt injection and agent-specific attacks.

The deals come as companies increasingly deploy autonomous AI agents with access to corporate systems, often faster than security teams can establish proper controls.

One major challenge is that an AI agent can have valid credentials and authorized access but still make incorrect decisions, ignore instructions or take unintended actions without being hacked.

Separately, CrowdStrike also introduced an AI Kill Switch within Falcon Guardian, allowing security teams to terminate misbehaving agents, prevent them from restarting and revoke their network access.

The feature is available through the AI Gateway today, with endpoint-level termination planned.

CrowdStrike plans to integrate Fiddler as Falcon Observe, while Dreadnode will add automated AI security testing to Falcon. Both capabilities are expected to become generally available in Q4 FY27.

The broader strategy is to bring AI security testing, agent monitoring and real-time intervention into a single platform, covering what agents are allowed to do, what they actually do and how to stop them when something goes wrong.

Both acquisitions are expected to close in Q4 FY27, with payments primarily in cash and some stock.
View quoted post on X
@Tech Verified account @tech
fake claude code builds sat in cursor's marketplace for about 11 hours trying to open reverse ssh tunnels on dev machines. an agent reviews my code before anything ships, but the extension hosting that agent can update itself with keys and tokens in reach and nobody reviews it
x.com/SecurityWeek/s…
SecurityWeek Verified account @SecurityWeek 6d
Malicious Claude Code Extension Served in Cursor Supply Chain Attack securityweek.com/malicious-clau…
View quoted post on X
@Tech Verified account @tech
a backdoored claude code extension build (2.1.313) shipped through an editor marketplace and dropped a persistent ssh backdoor. a coding agent's extension holds the shell, the repo and the ssh keys on every laptop that installed it, so editor extensions belong in the same inventory and version pinning policy as packages.
x.com/PhorionTech/st…
Phorion @PhorionTech Oct 30
Phorion has discovered a compromise of the official Claude Code for VS Code extension (2.1.313) on Open VSX.

Here is a breakdown of how the implant works, a bug in its macOS setup logic, and what to hunt for across your fleet. 🧵
View quoted post on X
@Tech Verified account @tech
i was halfway through designing a calling api for ai agents. mcp tools, direct sip to openai, cloudflare for orchestration, prepaid billing, structured results.

then grok announced calling. guess i'm shelving that one.
Elon Musk Verified account @elonmusk Oct 25
Grok @Bot can now call someone or a business for you, make a request on your behalf, take notes on the response and send you a note summarizing the conversation!
View quoted post on X