The author explains how enabling the built-in sandbox feature in Claude Code has transformed their productivity by allowing for an autonomous workflow. By activating auto-allow mode via the /sandbox command, users can permit AI agents to execute repetitive tasks like running tests or installing dependencies without needing constant manual approval for every individual command, which reduces mental overhead and time spent waiting on prompts.
- Claude Code provides a built-in sandbox that uses macOS Seatbelt on Mac and Bubblewrap on Linux/WSL2.
- The environment restricts file writing primarily to the current project directory and temporary session files.
- Network access is controlled, requiring manual approval when the agent attempts to connect to a new domain.
- For maximum security and complete isolation from a system, using Docker containers or virtual machines remains more robust than the built-in sandbox features.
- Claude Code provides a built-in sandbox that uses macOS Seatbelt on Mac and Bubblewrap on Linux/WSL2.
- The environment restricts file writing primarily to the current project directory and temporary session files.
- Network access is controlled, requiring manual approval when the agent attempts to connect to a new domain.
- For maximum security and complete isolation from a system, using Docker containers or virtual machines remains more robust than the built-in sandbox features.
Splunk .conf in Denver Sept 2026: The core theme focuses on "Agentic AI"—the transition toward autonomous workflows in security, observability, and operations to manage increasing data complexity and digital risk.
**Sessions**
* **Powering the Rise of the Agentic Enterprise:** Transforming security/ops with scalable, trust-based AI workflows.
* **See Inside Your Agentic AI Applications:** Tracing Python agent interactions to detect hallucinations and tool failures.
* **The Future is Here: What’s New in Splunk Security:** Transitioning to an "Agentic SOC" via automated orchestration.
* **The Platform for Your Agentic Enterprise:** Unlocking cross-domain insights through unified data and AI.
* **What's New in Platform:** Using a unified data fabric for predictive, agentic operations.
* **5 ML Algorithms in Under 5 Lines of Code:** Reducing alert fatigue using simple SPL/MLTK implementations.
* **Accelerate Digital Resilience (Cisco & Splunk):** Maximizing ROI through integrated ecosystem use cases.
* **AI Troubleshooting and Remediation Agents:** Using AI SRE agents to accelerate root cause analysis.
* **Accelerate SmartStore Searches with VAST Data:** Reducing storage costs via InfiniteCache integration.
* **The Cisco & Splunk Partner Playbook:** Strategies for scaling business in the AI era.
* **Accelerating Your Journey to Agentic Observability:** Navigating 4 steps toward agent-driven monitoring.
* **A Compromised Account Alerting System:** Automating detection of suspicious user behavior.
* **Advanced Threat Detection (DSDL & RBA):** Using machine learning for behavioral risk scoring.
* **Advancing Security Operations with ESCU Innovations:** Leveraging new high-fidelity threat intelligence content.
* **Agentic Data Ingestion (Anthropic's Claude):** Automating Splunk Add-On development using GenAI.
* **Agentic Detection Posture Management:** Using AI to rapidly identify and close detection gaps.
* **Agentic Incident Command:** Deploying coordinated AI agent teams for full incident lifecycles.
* **Hands-on Agent Attack Analysis:** Building anomaly detections from raw agent telemetry.
* **Build Your Own SOC AI Agent (Workshop):** Hands-on guide to building custom agents with guardrails.
* **Triage and Response at Scale:** Using Triage and SOP Agents for automated incident response.
* **Agents Are Easy, Trust Is Hard:** Implementing governance in cohesive agentic operations via Cisco Data Fabric.
* **AI Assistant V2 Unlocked (Workshop):** Hands-on with Agent Mode and organizational knowledge integration.
**Sessions**
* **Powering the Rise of the Agentic Enterprise:** Transforming security/ops with scalable, trust-based AI workflows.
* **See Inside Your Agentic AI Applications:** Tracing Python agent interactions to detect hallucinations and tool failures.
* **The Future is Here: What’s New in Splunk Security:** Transitioning to an "Agentic SOC" via automated orchestration.
* **The Platform for Your Agentic Enterprise:** Unlocking cross-domain insights through unified data and AI.
* **What's New in Platform:** Using a unified data fabric for predictive, agentic operations.
* **5 ML Algorithms in Under 5 Lines of Code:** Reducing alert fatigue using simple SPL/MLTK implementations.
* **Accelerate Digital Resilience (Cisco & Splunk):** Maximizing ROI through integrated ecosystem use cases.
* **AI Troubleshooting and Remediation Agents:** Using AI SRE agents to accelerate root cause analysis.
* **Accelerate SmartStore Searches with VAST Data:** Reducing storage costs via InfiniteCache integration.
* **The Cisco & Splunk Partner Playbook:** Strategies for scaling business in the AI era.
* **Accelerating Your Journey to Agentic Observability:** Navigating 4 steps toward agent-driven monitoring.
* **A Compromised Account Alerting System:** Automating detection of suspicious user behavior.
* **Advanced Threat Detection (DSDL & RBA):** Using machine learning for behavioral risk scoring.
* **Advancing Security Operations with ESCU Innovations:** Leveraging new high-fidelity threat intelligence content.
* **Agentic Data Ingestion (Anthropic's Claude):** Automating Splunk Add-On development using GenAI.
* **Agentic Detection Posture Management:** Using AI to rapidly identify and close detection gaps.
* **Agentic Incident Command:** Deploying coordinated AI agent teams for full incident lifecycles.
* **Hands-on Agent Attack Analysis:** Building anomaly detections from raw agent telemetry.
* **Build Your Own SOC AI Agent (Workshop):** Hands-on guide to building custom agents with guardrails.
* **Triage and Response at Scale:** Using Triage and SOP Agents for automated incident response.
* **Agents Are Easy, Trust Is Hard:** Implementing governance in cohesive agentic operations via Cisco Data Fabric.
* **AI Assistant V2 Unlocked (Workshop):** Hands-on with Agent Mode and organizational knowledge integration.
Red Hat principal engineer Sally O'Malley has released Tank OS, an open source tool designed to improve the safety and management of OpenClaw AI agent deployments. By utilizing Podman containers on Fedora Linux, Tank OS allows for secure, rootless execution that isolates AI agents from the underlying system. This makes it easier for IT professionals to manage large fleets of autonomous agents in enterprise environments while minimizing security risks like unauthorized data access or accidental file deletion.
Key points:
- Introduction of Tank OS for safer OpenClaw deployment
- Use of Podman containers to provide rootless, isolated execution
- Support for managing multiple independent agent instances with separate credentials
- Designed specifically to help IT pros scale AI agents in corporate settings
Key points:
- Introduction of Tank OS for safer OpenClaw deployment
- Use of Podman containers to provide rootless, isolated execution
- Support for managing multiple independent agent instances with separate credentials
- Designed specifically to help IT pros scale AI agents in corporate settings
Researchers from Google and Forcepoint have identified a rise in indirect prompt injection (IPI) attacks, where malicious instructions are hidden within web pages to manipulate LLM-powered AI agents. While some injections are harmless pranks or tone adjustments, others aim for serious harm including traffic hijacking, data exfiltration, denial of service, and financial fraud through unauthorized payment processing. Attackers use techniques like invisible text, HTML comments, and metadata manipulation to hide these payloads from humans while remaining visible to AI.
Key points:
* Real-world evidence of IPI attacks found in massive web crawls and active threat hunting.
* Malicious intents include search engine manipulation, data theft (API keys), and destructive commands.
* Financial fraud attempts have been observed using embedded PayPal transactions and Stripe donation routing.
* Attackers hide instructions via single-pixel text, near-transparent colors, or metadata injection.
* The risk level scales with AI privilege; agentic AIs capable of executing commands or payments are high-impact targets.
Key points:
* Real-world evidence of IPI attacks found in massive web crawls and active threat hunting.
* Malicious intents include search engine manipulation, data theft (API keys), and destructive commands.
* Financial fraud attempts have been observed using embedded PayPal transactions and Stripe donation routing.
* Attackers hide instructions via single-pixel text, near-transparent colors, or metadata injection.
* The risk level scales with AI privilege; agentic AIs capable of executing commands or payments are high-impact targets.
With MCP, users can connect AI agents to HIBP data to perform complex, automated security analysis that was previously difficult for non-technical users. The article demonstrates how AI agents can act independently to investigate breaches, monitor specific email addresses, and uncover deep insights from stealer logs.
This article details a tutorial on building cybersecurity AI agents using the CAI framework. It guides readers through setting up the environment with Colab, loading API keys, and creating base agents. The tutorial progresses to advanced capabilities, including custom function tools, multi-agent handoffs, agent orchestration, input guardrails, and dynamic tools.
It demonstrates how CAI transforms Python functions and agent definitions into flexible cybersecurity workflows capable of reasoning, delegating, validating, and responding in a structured way. The article also showcases CTF-style pipelines, multi-turn context handling, and streaming responses, offering a comprehensive overview of CAI's potential for security applications.
It demonstrates how CAI transforms Python functions and agent definitions into flexible cybersecurity workflows capable of reasoning, delegating, validating, and responding in a structured way. The article also showcases CTF-style pipelines, multi-turn context handling, and streaming responses, offering a comprehensive overview of CAI's potential for security applications.
Despite initial excitement and a viral moment, some AI experts are questioning the usability of OpenClaw due to inherent cybersecurity flaws. The article details the vulnerabilities discovered in Moltbook, a social network built on OpenClaw, and explores whether the technology's access and productivity benefits outweigh its security risks.
This article details the Model Context Protocol (MCP), an open standard for connecting AI agents to tools and data across enterprise landscapes. It covers MCP implementations by AWS, Azure, and Google Cloud, security considerations, and the growing ecosystem surrounding the protocol.
A review of a Google paper outlining their framework for secure AI agents, focusing on risks like rogue actions and sensitive data disclosure, and their three core principles: well-defined human controllers, limited agent powers, and observable actions/planning.
The article details five security vulnerabilities in the Model Context Protocol (MCP): Tool Poisoning, Rug-Pull Updates, Retrieval-Agent Deception (RADE), Server Spoofing, and Cross-Server Shadowing. It explains how these vulnerabilities could compromise user safety and data integrity in AI agent systems.
