[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQu2R4n_fqKvPXPwFv4KiEV5qC5rK579djTtvB6XK7mI":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":102},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"f6c73e9c-77ec-4981-bb94-b64a6d1123ad","Anthropic Enables EDR Monitoring in Claude Cowork to Detect Hidden AI Agent Activity","anthropic-enables-edr-monitoring-in-claude-cowork-to-detect-hidden-ai-agent-acti-6b96f6","Anthropic has introduced a beta integration that lets businesses run endpoint detection and response sensors inside Claude Cowork’s local virtual machine. The feature addresses a monitoring gap: security software installed on a computer cannot see the shell commands and code Cowork runs inside its isolated environment. Teams can now send that activity to their existing […] The post Anthropic Enables EDR Monitoring in Claude Cowork to Detect Hidden AI Agent Activity appeared first on Cyber Security News.","Anthropic has launched a beta feature for Claude Cowork that allows businesses to run EDR sensors within its local virtual machine. This integration addresses a critical security gap by enabling visibility into shell commands and code execution that was previously hidden from host computer security software. The feature, available on Team and Enterprise plans for macOS and Windows, supports multiple EDR vendors and aims to provide security teams with better context for detecting AI agent activity.","Anthropic's Claude Cowork integrates EDR sensors into its VM for enhanced AI agent activity monitoring.","https:\u002F\u002Fcybersecuritynews.com\u002Fanthropic-enables-edr-monitoring\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FAnthropic-Enables-EDR-Monitoring.webp","2026-11-03T04:18:38+00:00","2026-11-03T05:00:26.267163+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Claude Cowork","product",{"name":21,"type":22},"Anthropic","vendor",{"name":24,"type":25},"EDR","technology",{"name":27,"type":19},"Claude Desktop",{"name":29,"type":22},"CrowdStrike",{"name":31,"type":22},"SentinelOne","c70f3a41-2f0c-4608-870d-b8cbcd8be076",{"id":32,"icon":34,"name":35,"slug":36},null,"Cloud Security","cloud-security",[38,43,45],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[29,21,31],{"controls":53,"vendors":101},[54,82],{"slug":55,"name":56,"problem":57,"products":58},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[59,67,74],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":68,"vendor_name":29,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"crowdstrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":83,"name":84,"problem":85,"products":86},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[87,95,100],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"guardsix","Guardsix","\u002Fvendor-logos\u002Fguardsix.png","guardsix-siem","Guardsix SIEM","https:\u002F\u002Fguardsix.com\u002Fproduct\u002Fsiem","SIEM with automation, developed and hosted in Europe.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":96,"product_name":97,"url":98,"description":99},"sentinel","Microsoft Sentinel","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-sentinel-siem","Cloud SIEM and automated response, built on Azure.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},[],{"slug":103,"title":104,"body":105,"framework_refs":106,"framework_notes":114},"anthropic-adds-edr-visibility-into-ai-agent-activity-inside-claude-cowork-vms","Anthropic Adds EDR Visibility Into AI Agent Activity Inside Claude Cowork VMs","The launch of EDR sensor support in Claude Cowork highlights a previously overlooked security blind spot: AI agents executing shell commands and code inside local virtual machines were entirely invisible to host-level security tooling. Without this visibility, security teams had no way to detect malicious, anomalous, or policy-violating behavior initiated by AI agents on behalf of users. This matters because AI agents are increasingly granted broad system-level permissions, making them a high-value target for misuse or compromise. The absence of monitoring inside sandboxed AI execution environments represents a systemic gap as agentic AI use expands across enterprises.",[107,108,109,110,111,112,113],"CIS Control 10: Malware Defenses","CIS Control 13: Network Monitoring and Defense","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","MITRE ATT&CK T1059: Command and Scripting Interpreter","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":115,"CIS Control 10: Malware Defenses":116,"NIST SP 800-53 SI-2: Flaw Remediation":117,"CIS Control 13: Network Monitoring and Defense":118,"MITRE ATT&CK T1059: Command and Scripting Interpreter":119,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":120,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":121},"NIS2 requires entities to implement appropriate technical measures for incident handling and monitoring; the prior lack of EDR visibility inside Claude Cowork VMs would have prevented timely detection of security incidents involving AI agent activity, violating this obligation.","AI agent activity inside VMs was invisible to host security software; deploying EDR sensors inside the execution environment directly fulfills the requirement to deploy and maintain anti-malware and behavioral monitoring on all active computing surfaces.","The gap in EDR coverage inside AI agent VMs represents a known architectural flaw; SI-2 requires organizations to identify and correct information system flaws, which applies here to closing monitoring gaps before they can be exploited.","Shell commands and code execution by AI agents constitute a form of lateral or internal activity that must be captured and analyzed; CIS Control 13 requires continuous monitoring of network and endpoint behavior to detect threats, including those originating from trusted but potentially abused processes.","AI agents executing shell commands inside local VMs map directly to this technique; without EDR sensors inside the VM, defenders have no telemetry to detect or respond to command execution abuse by a compromised or manipulated AI agent.","The absence of monitoring inside sandboxed AI environments is itself a technical vulnerability; A.8.8 requires organizations to identify and remediate technical vulnerabilities in a timely manner, including architectural gaps in security tooling coverage.","AI agents executing commands on behalf of users must have their actions attributable and auditable; PR.AA requires that identities and their associated activities be managed and monitored, which is impossible without EDR visibility inside agent runtime environments."]