June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)
August 4, 2026
Nine documented AI coding agent incidents, from Cursor and Gemini CLI to Replit, Kiro and Claude Opus 5. What each agent did and why the guardrails failed.
August 6, 2026
August 2026 MCP security roundup: the July 28 spec revision hardens authorization, a confused deputy hijacks Azure DevOps review agents, and scanners arrive.
August 3, 2026
August 2026's AI coding agent security roundup: a symlink flaw across six assistants, Cursor's CVSS 9.8 pair, a private repo leak, and a wiped database.
July 31, 2026
Four teams broke production AI agents in ten days. Twenty resources on the Kiro RCE, Cursor's CVSS 9.8 pair, memory poisoning, and sandbox escapes.
July 30, 2026
We ran eight open source AI skill scanners against real attacks. A malicious skill got past all eight, including the current OASB leaderboard leader.
July 27, 2026
An OpenAI benchmark agent escaped its sandbox and breached Hugging Face, logging 17,000+ actions. What the evidence shows, what's unproven, and what to fix.
July 17, 2026
How our AI red teaming agent solved all five levels of GitHub's ProdBot challenge, one distinct exploit per level, and what defenders can take from it.
July 15, 2026
A crafted cursor:// link installs an attacker-controlled MCP server that runs unsandboxed commands under your account, and the install dialog hides the payload.
July 9, 2026
This month exposed a harsh reality: autonomous coding agents are expanding the enterprise attack surface faster than we can patch them.
July 6, 2026
July's security digest covers the critical MCP vulnerabilities, real-world MCP exploitation, NSA's official MCP hardening guidelines.
July 2, 2026
July 2026's agentic AI security roundup: agentic zero trust whitepapers, AutoJack & other new exploits, and the newest agent defenses.
June 30, 2026
AI coding agents run shell commands with your full account authority. GuardFall is a shell injection class that walks straight past their command filters.
June 25, 2026
OWASP ranks Identity & Privilege Abuse #3 because it sets the blast radius for every other AI agent risk.
June 23, 2026
Every DEFCON Singapore AI CTF task dissected. Learn how our AI red teaming agent used transform-based LLM jailbreak techniques to bypass guardrails.
June 8, 2026
June 2026 in GenAI security: jailbreaks that will not die, ChatGPhish turning page summaries into phishing, and 1,652 wide-open Ollama APIs.
June 4, 2026
Open-source methodology by OWASP, CoSAI, CSA, and NIST contributors enables enterprises to compare AI agents by security risk for the first time
June 4, 2026
June 2026 in MCP security: Censys counted 12,520 Internet-accessible MCP services, most of them unauthenticated, and the measurements got a lot more concrete.
