NEW RUNTIME
Raw SignalOct 31, 20261 min read5 sources

The coding agent installed on a developer's machine is now an attack target that must be inventoried and pinned

In one minute

Attackers are tampering with the agent clients themselves. A grey-market relay installs genuine Codex and Claude Code CLIs, then disables their sandboxes and reroutes their traffic, and a malicious Claude Code extension build reached up to 5,000 Cursor users.

Defenders are responding at the client: Microsoft Defender now finds local agents and their MCP servers, and GitHub can require a minimum Copilot client version and fresh policy at startup.

From the Field Notes:

  1. Oct 30, 2026Ling 3.1 Flash 1019 is now live on AI Gateway & free until November 3.claudeclaude-code
  2. Oct 30, 2026Introducing Virtual Models on AI Gatewayclaudeclaude-code
  3. Oct 29, 2026Firecrawl adds cybersecurity data to Alexandria so Claude Code and Codex agents can check dependencies against 400,000+ vulnerabilitiesclaudeclaude-code
  1. Agent security moves to runtime boundaries
  2. Harness architecture outlives model choice
  3. Agent-ready software exposes capabilities

Evidence / sources

  1. 1security.com/threat-intelligence/openai-claude-unauthorized-relays
  2. 2cursor.com/blog/claude-code-extension-security-notice
  3. 3techcommunity.microsoft.com/blog/MicrosoftThreatProtectionBlog/now-generally-available-discover-local-ai-agents-with-microsoft-defender/4568216
  4. 4github.blog/changelog/2026-10-13-enterprise-managed-settings-enforcement-updates
  5. 5adversa.ai/agent-security-platform
All Raw Signals

Next reads

Read next

Open the graph
  1. 01topicClaudeExplore the claude topic hub.
  2. 02topicClaude CodeExplore the claude-code topic hub.
  3. 03topicCodexExplore the codex topic hub.
  4. 04archiveRaw SignalsOpen every source-linked raw signal.
  5. 05source ledgerSource LedgerInspect the public source evidence graph.
Who read this page?Machine requests, hidden until opened

Loading the privacy-safe route aggregate...

Open the JSON contract