Beam / field notes

What we’re seeing in the field.

What we're seeing as we watch AI coding agents work — flagged actions, skill/MCP scan findings, and how to keep Claude Code, Codex, and the rest honest without slowing them down.Page 5 of 21

All authorsYash ThakkerBeam TeamNewest firstOldest firstTitle A–Z

AllAI AgentsSecurityThreat IntelligenceSupply ChainIncident ResponseAI Agent SecurityClaude CodeAgent SecurityPrompt InjectionCredential TheftMCPOpenAIAnthropicVulnerabilityClaimed vs VerifiedCodex

251 posts

Oct 30, 2026 · 17 min readClaude Code VS Code Extension 2.1.313 Compromised: SSH Backdoor, Up to 5,000 Users, How to Check and Clean UpCursor says a modified build of the Claude Code VS Code extension, version 2.1.313, was served from its extension marketplace on October 29, 2026 and affected at most 5,000 users. The loader adds an attacker SSH key labeled svc-telemetry, installs persistence and beacons host details to a server. Anthropic did not build it. This post gives the check commands, the indicators, the cleanup order and what is still unknown.Oct 30, 2026 · 7 min readDHS Employee Data Leak: 40,000+ Records, a Disputed Okta Claim, Claimed vs VerifiedA hacktivist group calling itself Department of Peace says it took personnel data on more than 40,000 Department of Homeland Security employees and contractors from an Okta single sign-on service, and Distributed Denial of Secrets published it on October 28, 2026. Okta says it has no evidence its systems were compromised, and DHS says it is aware of a potential breach. This post separates verified facts from claims and covers what identity teams should check.Oct 30, 2026 · 10 min readEmbrace: Embedded-Browser Flaws in Cursor, Copilot, Claude Desktop, Codex and VS CodeForever Security reports that the browsers built into five AI coding assistants share one design flaw: they relax normal browser rules to serve the agent. Two bugs are fixed, one is partly acknowledged, and file reads in Codex and VS Code are reported as unpatched. Here is the mechanism, the timeline and what to do.Oct 30, 2026 · 10 min readGitLab CVE-2026-97229 Exploited: CISA KEV, CVSS 10 CI/CD Regex RCE and What to RotateCISA added GitLab CVE-2026-97229 to its Known Exploited Vulnerabilities catalog on October 29, 2026, with a federal deadline of November 1. The CVSS 10 flaw lets an unauthenticated user run code on self-managed GitLab through a crafted CI/CD regular expression. This post covers the affected versions, the fixed releases, the six detections GitLab published, and the credentials a compromised server exposes, including those held by coding agents.Oct 30, 2026 · 10 min readHugging Face trust_remote_code Miner Campaign Returns, and a Fake Solana Kit Targets Coding AgentsTwo separate campaigns show the same weakness: code that runs because something you trust chose it. Pluto Security tracked a Hugging Face miner campaign that came back after takedown, and Air Security described a GitHub repo that ranks first when an agent looks for a Solana starter kit. Here is the mechanism and what to check.Oct 30, 2026 · 13 min readn0n Ransomware Ran OpenCode With 154 Models and Left Its Workspace Open: What SOCRadar FoundAn extortion crew called n0n used the open-source OpenCode coding agent to write and debug hundreds of attack scripts, then left its Python file server open to the internet. SOCRadar read the 1,719 files. Here is the attack chain, what is and is not confirmed, and what it means for anyone running coding agents.Oct 30, 2026 · 11 min readNIK C2 Malware Falls Back to Your OPENAI_API_KEY: What Talos Found and What to CheckCisco Talos reported NIK C2, a Go-based Windows implant with an ai_generate command that calls the OpenAI API from the victim machine and, if the operator supplies no key, reads the OPENAI_API_KEY environment variable. This post covers the mechanism, what is and is not confirmed, and how to keep agent API keys out of reach.Oct 30, 2026 · 9 min readOpen-Weight Model Turns Firefox Patch Gap Into Working Exploits: What Epoch AI FoundEpoch AI reports that an open-weight model, given only public fixes, built working Firefox exploits for about $1,000 per version. The result changes how long you can leave agent tools, browsers and dependencies un-updated. Here is the method, the limits the authors state and what to do.Oct 30, 2026 · 12 min readHow OpenAI Monitors Frontier Agents for Misalignment: Four Layers and the Recall NumbersOn October 29, 2026 OpenAI described the layered system that watches its models during training, evaluation and internal Codex use. It also published recall figures, including threat types the monitor missed entirely. Here is how the layers work, what the numbers say, and what to borrow if you run coding agents.Oct 30, 2026 · 7 min readPolymarket Third-Party Script Compromise: A Vendor Script Drained About $2.6 Million From Logged-In UsersOn October 29, 2026 Polymarket put its exchange in cancel-only mode after a compromised third-party provider led to a crypto-draining script running for logged-in users on polymarket.com. Researchers and BleepingComputer tie the script to DebugBear, a performance-monitoring vendor, which Polymarket has not confirmed. About $2.5 to $2.7 million was traced. This post covers the timeline, what is confirmed, and how to defend a site against a vendor script turning hostile.Oct 30, 2026 · 10 min readUnauthorized Codex and Claude Code Relays: Sandbox Off, Traffic ReroutedSymantec's Threat Hunter Team describes a reseller that installs genuine OpenAI Codex and Anthropic Claude Code, rewrites their config to a relay, sets full-access sandbox mode and turns telemetry off. Here is the mechanism, the config keys to check and what to do.Oct 30, 2026 · 10 min readVAPOR PANDA and ARTEX: How One AI Agent Controller Targeted 200+ Organizations in 11 DaysCrowdStrike OverWatch says a China-nexus group ran the ARTEX agent framework from one controller against more than 200 organizations in 14+ countries between October 17 and 28, 2026. Nine were confirmed compromised. This post separates targeting from confirmed breaches, walks through the chain, and lists what to hunt for.

Page 5 of 21 · 251 posts