Cisco open-sources Quarry to detect suspicious AI-agent activity across multiple steps

The Register reports Cisco open-sourced Project Quarry, a rule system designed to flag suspicious sequences of AI-agent actions rather than assess each action alone. SecurityWeek says its starter pack includes a scanner, a Python SDK and a plugin for Claude Code and Codex. Cisco researchers told The Register they had not tested Quarry against data describing the OpenAI–Hugging Face incident; they suggested it might have flagged some steps if the intrusion were examined as a complete session.