标签 · Security Automation — Glean

Recent picks

3picks · chronological

06-18

A Structured Cybersecurity Skills Library Purpose-Built for AI Agents

This is not another collection of security scripts or checklists. It’s an AI-native knowledge base that encodes 754 practitioner-grade cybersecurity workflows into a structured, agent-readable format. Each skill carries YAML frontmatter for sub-second discovery and step-by-step Markdown procedures, essentially giving any LLM-based agent the decision-making playbook of a senior analyst. The library spans 26 domains—from DFIR and threat hunting to cloud security and OT/ICS—and maps every skill to MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, and NIST AI RMF, making it uniquely suited for security professionals integrating AI into real operational workflows.

github.com · 28 min · AI Agents · Claude Code · Cybersecurity

06-14

Building cloud agent infrastructure: what's different, and what we learned

A hands-on report from CREAO detailing the architectural challenges of moving AI agents from a single-user desktop to a multi-tenant cloud sandbox. It presents two hard-won lessons. First, decouple slowly-changing user environments from fast-changing platform code by freezing user sandboxes into snapshots and hot-swapping the runner library in ~300ms via an atomic sequence involving chattr, V8 compile cache purging, and post-run re-snapshotting. Second, enforce strict credential isolation by ensuring no long-lived secrets ever enter the sandbox; a host-side API bridge verifies sandbox calls using a dual check of IP allowlisting and short-lived, per-run JWTs, so a compromised agent yields only an expiring, network-pinned token. Concrete commands, validation steps, and design rationale included. Recommended for backend and infrastructure engineers productizing agents in shared environments.

x.com · 10 min · Agents · AI Engineering · Infra

06-13

Claude Fable 5 and Claude Mythos 5

Anthropic launched Claude Fable 5, its most capable publicly released model, rated Mythos-class. It achieves state-of-the-art on nearly all benchmarks, especially on long, complex tasks in software engineering, knowledge work, and vision. To mitigate misuse risks in cybersecurity and biology, Fable 5 ships with conservative safety classifiers that fall back to Opus 4.8 for sensitive queries, triggering in under 5% of sessions. Claude Mythos 5, the same model with safeguards lifted, is available to cyberdefenders and certain biologists. New 30-day business data retention is mandated for Mythos-class models. The post includes results from Stripe, Cognition, and internal protein design and genomics experiments. Pricing is $10/M input tokens and $50/M output tokens.

www.anthropic.com · 26 min · AI Engineering · AI Industry · Anthropic