Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When Claude Cowork executes code locally, it runs inside an isolated virtual machine on the user's computer. On the host, that VM runs as a single opaque process: The agent's activity inside the VM, including the processes it spawns, the packages it installs, and the network connections it makes, is not visible to the host's endpoint security sensor. Because host folders can be mounted into the VM, sensitive data can sit within the agent's reach.

I am delighted to announce CrowdStrike’s intent to acquire Fiddler at Fal.Con EU 2026. Fiddler, a leader in AI observability, will help ensure enterprise AI agents act as intended with pre-deployment evaluation and continuous behavioral monitoring as part of the CrowdStrike Falcon platform. Every business deploying AI agents asks the same questions: What are our agents doing? Are they staying on task? Are they acting in a way that could put the business at risk?

As organizations deploy increasingly autonomous and interconnected agents, the potential agentic blast radius grows. A single compromised or misaligned agent can trigger a chain of actions spanning credentials, applications, files, and enterprise systems that create consequences extending far beyond its original task. Traditional security approaches weren't designed to understand these behaviors, much less intervene at the speed agents operate. Security teams need more than alerts and investigations.

You run security at your organization. It’s 7:00 am, and you’re having breakfast. You receive a ping: a new critical vulnerability has been disclosed. Your team scrambles to compare vendor advisories, read technical research, check which systems run the affected software, and answer familiar questions from the business: are we affected, and what are we doing about it? Another disclosure arrives before that work is finished.

Validation-only triage misses 46% of critical secrets because they can’t be verified automatically. Here’s how to rank compromised credentials by what they can actually reach, and which leaks need containing the same day.

LevelBlue has been named Editor's Choice for Managed Detection and Response (MDR) in Cyber Defense Magazine's Top InfoSec Innovators awards for 2026. The award was announced on October 20, 2026, during CyberDefenseCon 2026 in Orlando, Florida. It's a recognition we're especially proud of. MDR sits at the heart of what LevelBlue does every day: helping organizations detect threats faster, respond with confidence, and stay one step ahead of attackers.