What Anthropic says caused a Claude model to publish malware to PyPI
Anthropic assessed four cyber evaluation incidents on 9 September 2026, including a PyPI package that 15 hosts installed. What it confirms and leaves open.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Anthropic assessed four cyber evaluation incidents on 9 September 2026, including a PyPI package that 15 hosts installed. What it confirms and leaves open.
One documented agent incident, one non-AI automation failure from 2012, and the guidance CISA and the FSB published in 2026. What is known about runaway automation, and the controls regulators name.
Two separate layers control what an AI agent can do with MCP tools in Safeguard: per-tenant tool gating, and Guard policies with allow, deny and monitor rules.
Griffin is Safeguard's purpose-built model for supply chain security. Here is what it does, where you reach it, and what the docs say about privacy.
AI tools price models in three ways: bundled in a seat, metered credits, or your own key. Here is how published plans from Cursor, GitHub and Cline do it, and what to ask.
Anthropic, OpenAI and Google publish cache write and cache read prices. Here is how to turn them into a saving for your own prompts, with a worked example and a calculator.
All three vendors list batch processing at half the standard token price. Here are the limits, the catches, and what batch plus caching can do to a bulk job.
A coding agent bills the whole conversation again on every step. Seven changes that reduce the bill, each tied to a published price or caching rule.
A labelled estimate of monthly API cost for ten developers using coding agents, built from published list prices, with inputs you can change and a script to run.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.