Anthropic adds EDR support for Claude Cowork AI agents
Claude Desktop beta now allows EDR sensors in local VMs for Windows and macOS users.
Stories per day · 30 days
4 RSS
Relatedai-agents2claude2agent1agent-security1anthropic1application-control1cowork1endpoint-security1insider1kaspersky1kernel1mcp1microsoft1monitoring1prompt-injection1sentinelone1virtual-machine1wesp1
28 stories, newest first · one card per story
Stories tagged #edr
Anthropic Enables EDR Monitoring in Claude Cowork
Anthropic's beta lets teams monitor Claude Cowork activity inside local VMs via existing EDR consoles on macOS and Windows.
Kaspersky adds AI agent detection and control to its endpoint and security products
Kaspersky says over 2500 AI-related vulnerabilities have been published since 2025 and its products can now block or monitor agents like Claude and Codex.
Microsoft's WESP aims to move EDR out of the Windows kernel
Insider builds already include wesp.sys, a mini-filter at altitude 329500, and user-mode API espclient.dll.
SentinelOne launches Singularity Agentic Detection and Response
The add-on inventories agents and MCP servers, blocks prompt injection and jailbreaks inline, and can stop one agent without halting a workflow.
3
Tanium adds endpoint behavior detection and AI-assisted threat hunting
Tanium relaunched Security Operations with behavioral endpoint detection, fleet-wide response, and plain-language AI hunting.
3
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
BigDiskBuster proof of concept keeps Microsoft Defender running while blocking updates and opening a detection gap.
How Huntress Detects and Responds to a ClickFix Attack
Huntress says ClickFix evades file-based EDR and describes endpoint rules that kill pasted commands in under a second.
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
NordLayer argues browser-based SaaS attacks, including AiTM phishing and malicious extensions, often evade traditional EDR.
4
From Network Intrusion Detection to Blockchain-Backed Endpoint Detection and Response: Mapping the Landscape of Decentralized Detection-and-Response Architectures
A systematization maps blockchain roles in detection-and-response and finds per-endpoint on-chain loops remain rare.
Quarantined isn't contained: Agentic phishing response with Elastic and Sublime
Elastic and Sublime Security correlate quarantined phishing email with endpoint alerts for agentic response.
2
EDR Evasion Stack Helps Process Injection Slip Past Defenses
Process parameter-poisoning injects code into process initialization structures, evading EDR tools that monitor standard Windows APIs.
[object Object]
Huntress says AI mainly accelerates existing attacker tradecraft and introduces Athena to speed SOC investigations.
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
A fake LastPass Authenticator installer uses a Microsoft-signed driver to kill EDR, then steals passwords and wallets.
2
UltraViolet Cyber Equinox measures detection coverage against MITRE frameworks
UltraViolet Cyber launches Equinox, an AI-automated platform mapping SIEM and EDR detection coverage against MITRE ATT&CK and ATLAS frameworks.
4
12 Best Server Security Solutions Compared (2026): Features & Pricing
GBHackers ranks 12 server security solutions for 2026, naming CrowdStrike and SentinelOne as server EDR leaders and Trend Micro Deep Security top for virtual patching.
9
Top 10 Best Server Security Solutions in 2026
Cyber Security News ranks 2026 server security platforms, favoring Trend Micro for hybrid estates, CrowdStrike for detection, Defender for Azure economics.
4
Top 10 Best Ransomware Protection Solutions in 2026
A 2026 buyer's guide ranks ten ransomware protection tools by kill-chain role as extortion shifts from encryption to data theft.
10
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Researcher Chaotic Eclipse released FalconFlank, a PoC zero-day privilege escalation exploit against CrowdStrike Falcon's Microsoft Office macro removal feature.
4
The 12 Best Endpoint Detection & Response (EDR) Solutions, Compared and Priced
An editorial scorecard ranks 12 EDR platforms, with CrowdStrike and SentinelOne tied at 8.6/10 and telemetry retention identified as the hidden cost driver.
9
Mars Security Debuts Automated Threat Engine Processing Live Cyber Intelligence Into Validated Rules Within Minutes
Mars Security launches Real-Time Intel-Based Detection, converting threat intelligence advisories into validated, ATT&CK-mapped detection rules within minutes for SOCs.
4
The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced
GBHackers compares 12 business antivirus products on detection, EDR depth, pricing, and platform coverage, ranking CrowdStrike and Bitdefender joint top at 8.8.
13
Researcher Publishes CrowdStrike Privilege Escalation Zero Day
Researcher NightmareEclipse published FalconFlank, a zero-day local privilege escalation in CrowdStrike Falcon Sensor abusing its Office malicious macro remediation feature.
3
Managed EDR: What It Is & How to Choose a Provider
Huntress outlines differences between managed and unmanaged EDR and offers guidance on evaluating managed detection and response providers.
1