June 4, 2026
Open-source methodology by OWASP, CoSAI, CSA, and NIST contributors enables enterprises to compare AI agents by security risk for the first time
Read moreJune 4, 2026
Open-source methodology by OWASP, CoSAI, CSA, and NIST contributors enables enterprises to compare AI agents by security risk for the first time
Read moreJune 4, 2026
Open-source methodology by OWASP, CoSAI, CSA, and NIST contributors enables enterprises to compare AI agents by security risk for the first time
Read more
32 posts in Research · Browse all posts
July 15, 2026
A crafted cursor:// link installs an attacker-controlled MCP server that executes unsandboxed commands under your account. The install dialog is supposed to…
June 30, 2026
AI coding assistants run shell commands with your full account authority, but their security filters are fundamentally flawed. Meet GuardFall: a…
June 3, 2026
The AIRQ report scores 100 AI agents on attack surface, blast radius, and defenses. The AIRQ framework lets you assess your own stack. Read about the…
May 26, 2026
A SynJack attack tricks AI coding assistants into RCE through a symlink-disguised file copy. We tested six major tools. All were vulnerable. How it works…
May 7, 2026
A regression in the Claude Code trust dialog and a settings-scope inconsistency let a cloned repo run unsandboxed code with one keypress, and on CI runners…
April 23, 2026
IICL is a structural jailbreak bypassing GPT-5.4 safety with just two words. Learn why newer doesn’t mean safer and what this means for teams building on…
January 27, 2026
MCP is becoming ubiquitous in agentic AI toolchains, but it places a non-deterministic LLM at the center of security-critical decision-making. The CoSAI…
July 14, 2024
In this edition, we traditionally explore the most critical vulnerabilities and emerging threats affecting Large Language Models (LLMs) and Generative AI…
December 17, 2023
A group of pioneering researchers have embarked on a quest to unveil the serious vulnerabilities and strengths of various AI applications from Classic…
December 8, 2023
Hacking LLM? What can be easier? Read it in our monthly LLM Security digest
November 16, 2023
Researchers explore vulnerabilities that lie within complex web of algorithms, and the need for a shield that can protect against unseen but not unfelt…
October 9, 2023
These are collected investigations into the Secure AI topic. Large language models are now dabbling in table representation, but here's the twist…
