@Tech (@tech) header
@Tech (@tech) profile picture

Security leader, PhD, professor, quiet founder. I write about where cybersecurity and AI are headed before it's obvious.

New York, NY
Joined June 2009
Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)Photo by @Tech (@tech)
crowdstrike is buying fiddler and dreadnode to watch agents and attack them before deployment. the case they call out, an agent with valid credentials doing the wrong thing without being hacked, is the exact problem i'm building against. more on it soon xitter.twitterapi.xyz/wallstengine/status/21…
CROWDSTRIKE TO ACQUIRE TWO AI SECURITY STARTUPS FOR $495M $CRWD has agreed to acquire Fiddler AI and Dreadnode as it expands its Falcon platform to secure AI agents throughout their lifecycle. The acquisitions, include: 1) Fiddler AI (~$400M) | Agent Observability: Monitors AI agents, tracks their decisions and tool usage, and explains why they took certain actions. It can also identify hallucinations, behavioral drift and unintended actions. 2) Dreadnode (~$95M) | AI Security Testing: Tests AI models, applications and agents for vulnerabilities before deployment, using more than 100 attack strategies, including jailbreaks, prompt injection and agent-specific attacks. The deals come as companies increasingly deploy autonomous AI agents with access to corporate systems, often faster than security teams can establish proper controls. One major challenge is that an AI agent can have valid credentials and authorized access but still make incorrect decisions, ignore instructions or take unintended actions without being hacked. Separately, CrowdStrike also introduced an AI Kill Switch within Falcon Guardian, allowing security teams to terminate misbehaving agents, prevent them from restarting and revoke their network access. The feature is available through the AI Gateway today, with endpoint-level termination planned. CrowdStrike plans to integrate Fiddler as Falcon Observe, while Dreadnode will add automated AI security testing to Falcon. Both capabilities are expected to become generally available in Q4 FY27. The broader strategy is to bring AI security testing, agent monitoring and real-time intervention into a single platform, covering what agents are allowed to do, what they actually do and how to stop them when something goes wrong. Both acquisitions are expected to close in Q4 FY27, with payments primarily in cash and some stock.
1
488
fake claude code builds sat in cursor's marketplace for about 11 hours trying to open reverse ssh tunnels on dev machines. an agent reviews my code before anything ships, but the extension hosting that agent can update itself with keys and tokens in reach and nobody reviews it xitter.twitterapi.xyz/SecurityWeek/status/21…
1
498
a backdoored claude code extension build (2.1.313) shipped through an editor marketplace and dropped a persistent ssh backdoor. a coding agent's extension holds the shell, the repo and the ssh keys on every laptop that installed it, so editor extensions belong in the same inventory and version pinning policy as packages. xitter.twitterapi.xyz/PhorionTech/status/211…
Phorion has discovered a compromise of the official Claude Code for VS Code extension (2.1.313) on Open VSX. Here is a breakdown of how the implant works, a bug in its macOS setup logic, and what to hunt for across your fleet. 🧵
2
483
a better computer-use model means more agents clicking around inside logged-in sessions for people. i'd want to know what those sessions can reach before turning it on.
6.1 Terra is here! It is good at a lot of things, but we are especially excited for this new era of computer use.
557
i was halfway through designing a calling api for ai agents. mcp tools, direct sip to openai, cloudflare for orchestration, prepaid billing, structured results. then grok announced calling. guess i'm shelving that one.
Grok @Bot can now call someone or a business for you, make a request on your behalf, take notes on the response and send you a note summarizing the conversation!
3
535
been running mythos 5.1 for code scanning. ran claude 4.6 on the same repos. same findings. 4.6 just flagged more false positives. starting to wonder what the price gap is actually buying me
1
472
we put five 9s on a pedestal.
soon we'll normalize taking products offline to patch and upgrade, and nobody will treat downtime as a failure.
planned downtime is about to become a security feature.
2
28
195,122
dated call, oct 24 2026:
this week it was php2shell, a Brotli RCE, and a GitLab bug dating back to 2014. at least two of them were found by models.
finding bugs is no longer the bottleneck. by oct 2027 the real limit on every security team is how many changes prod can absorb in a week. 
checking back on this in a year.
2
515
Codex measures the remaining Grok measures the used Same quota, opposite math. Why are we like this 😅
2
2
1,221
Here at @OpenAI in NYC, let’s walk through some of the great things they are working on. 🧵🪡
8
4
86
84,139
Tried out GPT Live, Here are my thoughts: I see no difference they current voice models today, if anything I found it a little slower and sluggish. I only did try the trivia function. I’ll go back in a few and try out the conversation function
1
709
OpenCode seems to have badly underestimated my Astra Pro usage. OpenRouter ended up reporting roughly 3x the cost OpenCode showed me. Has anyone else run into this? Is OpenCode miscalculating token usage/cost, or is there another reason for the gap?
3
64
167,430
My Life has become cycling through multiple codex instances.
4
982
The jump from getting a plaque for 100M tokens to treating 1B/week as baseline happened fast.
1,169
Enterprises should invest in tokens than in knowledge workers
1,095
It's mid-2026. We can drop the vibe and call it code again.
3
1,096
Zero-shot outfit selection
3
12,990
Windows 95 anyone?
1
1
5
1,354
No rate limits, no quotas, just always on
5
4
1,303
because burning tokens is easier than fixing your retrieval pipeline
1
2
1,530
control over your ai stack beats relying on someone else's roadmap for when (or if) you get the next model
1
2
1,513