CyberAgents Exchange Digest: October 26–30, 2026

🔦 Spotlight#

Vetting open-source AI agents with OpenAI GPT cyber models. Missed Wednesday’s TenableTalk Live? The recording is up. Luke Tamagna-Darr, VP of Research at Tenable, and Bob McSulla, Director of Research at Tenable, joined Zachery Moore from OpenAI’s cybersecurity go-to-market team to share best practices for securing AI agents. Then they show how Exchange Inspector vets open-source agents on the Exchange, pairing OpenAI’s frontier cyber models with expert human review. The listings that have passed carry the Exchange Inspector Vetted tier.

🎉 Celebrations#

Contributions

• 🧩 Tenable Scan Sweep by @lanz — Answers “which scans target 10.20.4.17?” across every scan in Tenable VM or Security Center, matching IPs, ranges, hostnames, tags, agent groups and credentials. It reads each scan once, read-only, into a local snapshot, then audits it for duplicate scans, credentialed templates with no credentials and targets VM can’t parse.
• 🧩 T1OTE IEC 62443 Onboarding by @dpstorey — Turns an IEC 62443 zones-and-conduits design into Tenable OT asset groups and detection policies. It validates the model and shows a numbered plan, and writes nothing until you approve it.
• 🔌 IPGeolocation.io MCP Server by @ipgeolocation — IPGeolocation.io’s official server, with 17 tools for IP geolocation, ASN and network data, VPN, proxy and Tor checks, abuse contacts and user-agent parsing.
• 🧩 PHP2Shell Tenable Remediation Tracker by @rafansmpj — Tracks PHP2Shell and Node2Shell remediation from live Tenable data through the Hexa AI MCP, measured against an SLA you choose. Each run writes an HTML, PDF and CSV report and compares it with the last one, so you see what’s new, fixed or regressed. It’s read-only and never launches scans.
• 🔄 endoflife.ai by @endoflife-ai — Updated: now tracks lifecycle dates for 700+ products, up from 500+.
• 🔄 KeenDreams Security Memory by @agent9ai — Updated: now works with the Tenable Hexa AI MCP, backed by a live, read-only run documented in its verification report.

Badges earned

🛠️ Changelog#

Tell us what you think

What’s working on the Exchange, what isn’t, and what would you change? Tell us on Discord, where you’ll also get an early look at what’s shipping next. Or email [email protected] if you’d rather. We read all of it.

💬 Community#

Fifty-one people joined the Discord this week. Welcome, AhnRyu, Siverstride_1, tetsuishii, fabian.basantes, brainbot, lauredoymaz, Mahdj, Shobz, utshoward, TheAce, Dimelo, fll245, Ishaan, Khushi, Maria Gonzalez, Master85, Michael Abong’o, Sreedhar Ellisetty, sw.camis, The CyberLayer, Chuck28000, Mohanad (sword0x00), ahmedmohsen8556, assuregrc, crashoverride41, Jaydot22, raymoond, Lucas Albano, Rennes, Roxanne, sana, Kirschke_Kyberis, CyberDan, DeRain, george, icthus, resilient-hedghog, Carl, Haf, Kerollos, Kshamanu, NetSec, okpo, rafaelcodeceira, shacharD, Tiago Tavares, willsbeard., Mario, aregk1, vijaymohanraj and Nafeee.

Ten of you said hello in #intros, from Kenya to Egypt. Ahmed is a security engineer at a financial institution, icthus runs Tenable VM and Web App Scanning and is here to learn, and okpo is building a lab to teach with. Tell us more about it in #build-in-public, okpo!

agent9.dev came to last Friday’s Exchange Hours and had a good time meeting the crew. Come say hi at today’s session.

Before SWARM Global kicks off, a look back at Black Hat’s SWARM winners. Team Vauban took first, ShellCodeandChill second and ZeroSignal third.

Don’t forget to say hello in #intros and tell us what you’ve built with AI lately.

📅 Events#

Exchange Hours, today at 1:00 p.m. ET

Every Friday at 1:00 p.m. ET on Discord.

SWARM Global, November 2–6

Starts Monday. The top three teams split $10,000 in Claude credits and more!

• Mon, Nov 2: Kickoff. 11 a.m. ET on Zoom, and the build period opens. Submit your team by 11:59 p.m. ET.
• Tue, Nov 3: Tutorial. 11 a.m. ET on Zoom, on best practices for building agents. It’s optional, and the invite comes by email.
• Wed, Nov 4: Submit. Open your PR to the CyberAgents Exchange by 2 p.m. ET.
• Thu, Nov 5: Pitch day. Up to 12 selected teams pitch live to judges from Tenable and Anthropic, about 15 minutes each with Q&A.
• Fri, Nov 6: Awards. 11 a.m. ET on Zoom for 30 minutes, when we announce the winners. Everyone’s welcome, and guests can register here.

Office hours run in Discord Monday through Wednesday if you get stuck.

No team yet? Registering signs you up, but only submitted teams compete. Submit your team in #submit-a-team by Monday night, a day later than we said last week. Going solo? A team of one counts. Then reply with your team name in #swarm-help to get a Tenable One tenant. Need teammates? #find-a-team has pinned templates for posting LFG or LFM.

Until next time,
— Bee