June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)
35 posts in Research · Browse all posts
October 6, 2026
Cryptographic Context Injection against a coding agent: one encrypted page makes GitHub Copilot CLI send local secrets to an attacker in 28 seconds.
August 20, 2026
Cryptographic Context Injection ships attacker instructions as ciphertext the model decrypts in its own sandbox. It leaked full Grok chat histories, zero-click.
July 30, 2026
We ran eight open source AI skill scanners against real attacks. A malicious skill got past all eight, including the current OASB leaderboard leader.
July 15, 2026
A crafted cursor:// link installs an attacker-controlled MCP server that runs unsandboxed commands under your account, and the install dialog hides the payload.
June 30, 2026
AI coding agents run shell commands with your full account authority. GuardFall is a shell injection class that walks straight past their command filters.
June 3, 2026
The AIRQ report scores 100 AI agents on attack surface, blast radius, and defenses. The AIRQ framework lets you assess your own stack.
May 26, 2026
A SymJack attack tricks AI coding assistants into RCE through a symlink-disguised file copy. We tested six major tools and every one of them was vulnerable.
May 7, 2026
A Claude Code trust dialog regression and a settings scope inconsistency let a cloned repo run unsandboxed code with one keypress, and none on CI runners.
April 23, 2026
IICL is a structural jailbreak bypassing GPT-5.4 safety with just two words.
January 27, 2026
MCP puts a non-deterministic LLM at the center of security-critical decisions. The CoSAI white paper maps more than 40 MCP threats; here are the takeaways.
July 14, 2024
This edition covers the critical vulnerabilities and emerging threats affecting large language models and generative AI, plus CISO and VC guides.
December 17, 2023
Researchers map the vulnerabilities and strengths of AI applications, from classic computer vision to the latest large language and vision-language models.
