Cisco open sources tool for detecting AI agents on hacking sprees

{
  "signal_id": "35559dae-25e2-7ba7-c9bb-5595dc72e461",
  "signal_type": "news",
  "signal_subtype": "launches",
  "detected_at": "2026-10-28T12:00:00+00:00",
  "company": {
    "name": "Cisco",
    "domain": "cisco.com"
  },
  "data": {
    "url": "https://www.theregister.com/security/2026/10/28/cisco-open-sources-tool-for-detecting-ai-agents-on-hacking-sprees/5305867",
    "title": "Cisco open sources tool for detecting AI agents on hacking sprees",
    "author": "Jessica Lyons",
    "excerpt": "security Project Quarry aims to provide a 'shared language' for evaluating agent behavior Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they did with the Hugging Face hack – or worse. It’s called Project Quarry, and it aims to provide a “shared language” for evaluating agent behavior, along the lines of what Snort , which Cisco also maintains, did for detecting malicious network traffic and what YARA did for rule-based malware identification. Most detection tools rely on specific interactions with an AI model or agent. Did it attempt prompt injection? Or did the agent call an attack tool? “But what is missing is the entire context under which something may occur,” Amy Chang, head of AI threat and security research at Cisco, said in an exclusive interview with The Register . She likened this to credit card fraud detection. Without context, individual transactions such as a small test charge or a single purchase in a location far away from a card-holder's usual location may not raise any flags. “And then you try again,” making another fraudulent purchase, “and that went through, too. So now I’m gonna buy the PS5,” Chang said. “Those are the things that Quarry addresses by taking into consideration the entire agent session,” she explained. “One tool call may seem in-scope until...",
    "product": "Project Quarry",
    "summary": "Cisco open-sourced Project Quarry, a behavior detection engine designed to monitor AI agents and identify rogue activities.",
    "planning": false,
    "image_url": "https://image.theregister.com/5259466.jpg?imageId=5259466&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683",
    "confidence": 0.95,
    "product_data": {
      "name": "Project Quarry",
      "full_text": "behavior detection engine called Project Quarry",
      "fuzzy_match": false
    },
    "product_tags": [
      "online_technology",
      "general_technology",
      "future_tech",
      "security"
    ],
    "published_at": "2026-10-28T12:00:00Z",
    "article_sentence": "Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they did with the Hugging Face hack – or worse."
  }
}

curl https://signals.autobound.ai/v1/signals/35559dae-25e2-7ba7-c9bb-5595dc72e461 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"cisco.com","limit":20}'