LIVE · cybersecurity feed
Live wire
CVE-2026-88779 · Citrix NetScaler Flaw Exploited Before CVE PublicationCVE-2026-88779 · NetScaler CVE-2026-88779 Exploited Before PublicationCVE-2022-28368 · dompdf_project dompdf XSS flaw added to VulnCheck KEVCVE-2026-88771 · Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploitedWarlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical InfrastructureShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group MembersChina-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM PhishingCVE-2026-7273 · Zyxel GS1900 Switch Flaw Exploited, Now in EU CatalogueCVE-2026-102489 · Zammad Session Fixation Vulnerability Exploited Same Day as DisclosureCVE-2026-102490 · Zammad GmbH Zammad Vulnerability Exploited Same Day as Publication
cloud

Security tools can now scan Claude Enterprise chats and uploads for sensitive data

Anthropic has introduced a Compliance API for its Claude Enterprise AI platform, enabling organizations to integrate Claude activity with their existing security and compliance tools. Over 100 security and compliance vendors are reported to have integrations with this new API, including major players like CrowdStrike, Microsoft Purview, Splunk, Palo Alto Networks, Cloudflare, and Zscaler.

ZeroDay News ·

Source: Help Net Security

Anthropic has introduced a Compliance API for its Claude Enterprise AI platform, enabling organizations to integrate Claude activity with their existing security and compliance tools. Over 100 security and compliance vendors are reported to have integrations with this new API, including major players like CrowdStrike, Microsoft Purview, Splunk, Palo Alto Networks, Cloudflare, and Zscaler.

For Claude Enterprise customers, the API provides a comprehensive feed of user activity. This includes the content of conversations, files uploaded by users, and project details. The API also covers sessions within Cowork and Claude Code, capturing prompts, responses, and tool calls. Additionally, it logs administrative actions, user sign-ins, and changes to settings. This allows security teams to monitor data pasted into Claude and the specific tools invoked during coding sessions.

Beta support is currently available for session records originating from Microsoft 365 add-ins and Claude Science. The partner ecosystem for the Compliance API spans various security domains, including data loss prevention (DLP), security information and event management (SIEM), identity management, eDiscovery, and AI security posture management. For instance, Hadrius and Shield offer conversation archiving capabilities, particularly relevant for financial firms with regulatory recordkeeping obligations.

The scope of data accessible to each vendor through the API can vary. Some vendors, such as Salt Security and Torch Security, do not access conversation content, while Datadog primarily ingests audit logs from Claude Platform. Both Enterprise and Platform customers can utilize the API, but Platform customers receive only activity events, without access to prompts or model responses.

Within Claude Enterprise, only the Primary Owner role has the authority to enable the Compliance API. Owners are also responsible for creating access keys for their respective organizations, while Administrators do not have visibility into these settings. The availability of integrations varies by vendor. Netskope's integration is currently in private preview, and Okta's is slated for a beta release to select customers. KnowBe4 anticipates general availability for its integration in November 2026, and Vanta, currently in beta with select customers, plans general availability for January 2027.

cloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
breach

Frontline Education Breach Impacts K-12 School District Staff

Frontline Education, a prominent software provider for K-12 school districts in the United States, has confirmed a data breach that exposed the personal information of school staff. The incident, which was discovered on August 14, 2026, stemmed from a vulnerability in a third-party software product utilized by the company.

vulnerability

Google halts open-source bug bounty program amid AI spam surge

Google has temporarily suspended submissions for product vulnerabilities to its Open Source Software Vulnerability Rewards Program (OSS VRP), effective October 1, 2026. The company cited a significant increase in automated submissions, most of which were deemed invalid, as the reason for the pause.

ai

Apple tightens macOS disk access as AI agents become more powerful

Apple is implementing stricter controls for Full Disk Access in macOS, citing an increased risk to user privacy from increasingly capable and autonomous AI agents. The company indicated that future macOS versions will require users to take explicit steps to grant applications this permission. A specific rollout date and the precise mechanics of these new controls have not yet been detailed.

nation-state

doxx.net opens Agentic Defined Networking public beta, raises $38 million

doxx.net has launched the public beta of its Agentic Defined Networking (ADN) platform, which enables users and their AI agents to establish private, secure networks and communicate without intermediary servers. The company also announced it has secured $38 million in Series A funding, led by Andreessen Horowitz, with additional participation from Animo Ventures and Focal.vc. As part of the…

vulnerability

AI slop submissions force Google to freeze its open-source bug bounty

Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) for new product vulnerability submissions, effective October 1, 2026. The company cited a substantial increase in automated, AI-generated reports, most of which were invalid, as the reason for the pause. This influx of low-quality submissions overwhelmed the engineers and open-source maintainers…

nation-state

Another OpenAI Safety Expert Quits and Raises New AI Safety Concerns

David Robinson, a veteran safety expert at OpenAI, has resigned from the company, citing concerns about its culture and rapid AI development model. Robinson, who was instrumental in authoring safety reports accompanying major product launches during his three-and-a-half-year tenure, stated that he believes the company's current trajectory is unacceptable.