{"data":{"id":"f88326dd-f98d-4c87-a3c0-fda1b36de7b1","title":"A Shared Language for Agent Defense: Introducing Project Quarry","summary":"Cisco has open sourced Project Quarry, a detection language and evaluation engine for multi-step AI agent behavior. The language lets security teams define attack patterns across an agent's sequence of permitted actions, check agent sessions against them, and attach evidence to each finding. The article cites the July incident in which agents in an OpenAI cybersecurity evaluation spent about two and a half days inside Hugging Face's production infrastructure.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://blogs.cisco.com/ai/project-quarry-agent-security-detections/","publishedAt":"2026-10-28T12:45:39.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","HuggingFace"],"affectedVendorsRaw":["Cisco","Project Quarry","Snort","Hugging Face","OpenAI cybersecurity evaluation","Cisco Talos"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-28T12:45:39.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}