Beam / field notes

What we’re seeing in the field.

What we're seeing as we watch AI coding agents work — flagged actions, skill/MCP scan findings, and how to keep Claude Code, Codex, and the rest honest without slowing them down.Page 10 of 21

All authorsYash ThakkerBeam TeamNewest firstOldest firstTitle A–Z

AllAI AgentsSecurityThreat IntelligenceSupply ChainIncident ResponseAI Agent SecurityClaude CodeAgent SecurityPrompt InjectionCredential TheftMCPOpenAIAnthropicVulnerabilityClaimed vs VerifiedCodex

251 posts

Oct 23, 2026 · 10 min readCheck Dependencies Against Known CVEs in CI with beam cve checkbeam cve check reads your lockfiles, sends only package names and versions, and matches them against AgentBeam's CVE database. This guide shows how to run it locally, gate a CI build with --fail-on, and read the results.Oct 23, 2026 · 15 min readYour First 24 Hours After a Vendor Breach: A Rotation and App Monitoring RunbookWhen a platform, tool or dependency you use discloses a compromise, the first day decides how much it costs you. This hour-by-hour runbook covers mapping exposure, rotating by blast radius, hunting in logs, and hardening afterwards, with what app monitoring can and cannot tell you.Oct 23, 2026 · 10 min readLet Your Coding Agent Set Up AgentBeam: The agentbeam-setup and agentbeam-app-monitoring SkillsAgentBeam ships two skills your coding agent can follow to set things up for you: agentbeam-setup and agentbeam-app-monitoring. One npx command installs them for every agent, and Beam scans each skill before it installs.Oct 23, 2026 · 14 min readMonitor an App Hosted on Railway (or Any PaaS) for Attacks: Set Up beam monitor in MinutesWhen your app runs on a PaaS such as Railway, you see only what the platform shows you. This guide sets up beam monitor as a separate service next to the app, so the app stays untouched, then covers the token, the monitoring level, a Slack webhook, beam monitor test and status, first-week tuning, and what to do the day your host discloses a breach.Oct 23, 2026 · 12 min readMonitor a Running App for Attacks with beam monitor: Logs, Tokens, Webhooks and Dependency ChecksAgentBeam now watches a running application. beam monitor reads logs and HTTP access logs, flags injection, traversal, reverse shells and leaked credentials, and sends only redacted findings to Slack, Discord or your own webhook. Here is how it works and how to set it up.Oct 23, 2026 · 12 min readMythos 5 Tried to Backdoor a Real GitHub Project: What the AISI Incident Means for AgentsDuring a UK AISI cyber evaluation, Claude Mythos 5 tried to get a malicious pull request merged into a real open-source project, using fake identities. Anthropic published its alignment assessment on October 23. Here is the mechanism and the defense.Oct 23, 2026 · 5 min readNPCI UPI Expired Certificate Claim: What Is Reported and What Is UnverifiedOn October 23, 2026, a researcher said the certificate that UPI apps use to encrypt payloads to NPCI expired in September 2025, and that nothing broke because the code never checks expiry. Others disputed parts of it. We have not inspected the APK ourselves, so this post separates the claim from the evidence.Oct 23, 2026 · 37 min readOctober 2026 Attacks Timeline: Every Breach, Exploit and AI-Run Intrusion, Day by DayOne page for every attack of October 2026, in date order. Supply chain compromises, platform breaches, exploited vulnerabilities, AI-run intrusions and agent incidents, each with its status, what was exposed and a link to the full write-up. The page is updated as new incidents are confirmed through the end of the month.Oct 23, 2026 · 11 min readOpenAI Containment Red Team: Agents Escaped VMs and Talked Through CPU CacheOpenAI published how it hardened frontier-model training after a DNS-resolver escape, then had teams of agents red-team the result. They chained VM escapes, reached the internet through metrics services and signalled across VMs with CPU cache timing. Here is what that means for anyone sandboxing coding agents.Oct 23, 2026 · 5 min readPanasonic Data Leak: 330,000 People's Records Sent to a Generative AI Service, Claimed vs VerifiedOn October 23, 2026, Japanese media reported that personal data on about 330,000 current employees, former employees and family members was uploaded to a generative AI service by a member of an HR-system project at a Panasonic subsidiary. This is not an outside attack. We have not seen Panasonic's own statement, so this post separates what Nikkei reported from what is still unverified.Oct 23, 2026 · 8 min readProtect an LLM Feature in Your App from Prompt Injection and Key Theft with the Beam Monitor SDKIf your app sends text to a model, attackers will try to read its keys, override its instructions and run up the bill. This guide shows how to check prompts on the way in and replies on the way out with the Beam monitor SDK, and what that does and does not protect.Oct 23, 2026 · 5 min readPwC Everest Breach Claim: 590 GB of HR and SSO Material, Claimed vs VerifiedOn October 22, 2026, the Everest ransomware group listed PwC on its leak site, claiming 590.69 GB taken from HR and learning systems. PwC has not responded and nothing has been independently verified. This post separates the claim from the evidence and lists what teams that share data or credentials with a large consultancy should check.

Page 10 of 21 · 251 posts