CyberAgents Exchange Digest: October 19–23, 2026

Welcome to the first CyberAgents Exchange Digest we’re sharing far and wide. Every Friday it rounds up what builders listed on the Exchange, who earned a badge, what changed on the site and what the community has been up to.

🔦 Spotlight#

Malware Analyst. Tom Abai, Security Researcher at Tenable, built this skill to speed up his own analysis of the malicious JavaScript that hides inside supply chain attacks. It’s static-only, so it reads the sample and never runs it. In the interview he points it at an obfuscated index.js, and Claude writes a deobfuscator for that one file, decodes thousands of hidden strings and works out that it’s a credential-stealing worm. It comes back with the hashes of the files the worm drops, its network IOCs and new Sigma and YARA rules to catch it.

🎉 Celebrations#

Contributions

• 🧩 Tenable + SentinelOne Asset Reconciliation by @jdelong-tenb — Matches Tenable’s asset inventory against SentinelOne’s agents by hostname and IP to find hosts with no endpoint protection, and can tag them in Tenable for follow-up.
• 🧩 Tenable + SentinelOne Attack Path Interruption by @jdelong-tenb — Checks a live Tenable One attack path against SentinelOne’s alert stream, and isolates a host on the path that shows lateral movement.
• 🧩 Tenable + SentinelOne Patch Remediation Bridge by @jdelong-tenb — Sends a Tenable finding to your patch tool’s MCP server, waits for the job to pass, then releases SentinelOne containment on the patched host.
• 🤖 Patronus Security by @patronus-protect — Local-first prompt injection, PII and DLP checks for AI agents, as a CLI scan or runtime protection.
• 🧩 PHP2Shell Tenable Skill by @securibee — Reports which assets are exposed to PHP2Shell (CVE-2026-109618, CVE-2026-109619) from Tenable data via the Tenable Hexa AI MCP, as HTML, PDF and CSV.
• 📋 PHP2Shell Response Playbook by @jtbuchanan-tenb — Finds, fixes and hunts PHP2Shell in one Claude Code command, chaining the PHP2Shell Tenable Skill, Remediation Priority & Impact Agent and SOC-Hunter. Comes with a seven-slide briefing to share with your team.
• 🔄 PCI Failure Pattern Explainer by @jdelong-tenb — Updated: ranks fixes by how many findings each one clears, adds evidence checklists for disputes, checks how old the scan is and can write an HTML report by asset.

Badges earned

🛠️ Changelog#

Introducing the CyberAgents Exchange Digest

You’re reading it. The weekly roundup now lives at /digest, linked from the main navigation. Every issue has its own dated address, like /digest/2026-10-23 for this one, and /digest/latest always opens the newest. The sections keep the same names every week, so you can link straight to one, like this changelog. Each issue has a Share button that stays with you as you scroll and Newer and Older links for past issues. There’s also an RSS feed if you’d rather follow along in a reader.

💬 Community#

Welcome to everyone who joined this week: Cadu, Cpierce, George, Adam, ryan.camis, Sec@fs, Nic G, Rishi, juggernaut82, schm1tz, ugursaritac, Nihar Belani, CyberSecurity-Architect, @make, DKDN, scoobydoo989, Lord.Of.The.PLCs, steveo_100, Steve A, DrGuala, nyxbyte, ForgeW3S, Raunak, JR1960, Santhosh, GusG0rman, agent9.dev, Areeb, Darren, runthebees, Igor Eduardo, papasmurf, sorryshaktiman and Lelio (BH) RM357558.

Don’t forget to say hello in #intros and tell us what you’ve built with AI lately.

Monday question, still open in #general: What’s the first thing you’d hand to an AI agent, and the one thing you’d keep for yourself?

📅 Events#

Exchange Hours, today at 1:00 p.m. ET

Every Friday at 1:00 p.m. ET on Discord.

Vetting AI agents with OpenAI GPT cyber models, October 28

Wednesday, October 28 at 11:30 a.m. ET. Speakers from Tenable and OpenAI show how GPT cyber models power Exchange Inspector. Mark yourself interested on the event page to get a reminder.

SWARM Global, November 2–6

Registered? Submit your team by November 1. Registering signs you up, but only submitted teams compete. Submit with the form in #swarm-global. Going solo? Submit a team of one. Once your team is in, reply with your team name in #swarm-help to ask for a Tenable One tenant.

Need teammates? Post LFG or LFM in #find-a-team.

Kickoff is November 2 at 11:00 a.m. ET, and winners are announced November 6. The top three teams split $10,000 in Claude credits and more!

Until next time,
— Bee