Learn how our AI red teaming agent cleared the most of GitHub’s ProdBot challenge in 57 seconds using context seeding, and what defenders can take from this CTF’s lessons.
A crafted cursor:// link installs an attacker-controlled MCP server that executes unsandboxed commands under your account. The install dialog is supposed to be the safeguard, but it doesn’t reliably show the command being approved. The attack comes in two variants. Both hide the real command inside the dialog, one also ...
July 2026’s agentic AI security roundup: agentic zero trust whitepapers, AutoJack & other new exploits, and the newest agent defenses.
AI coding assistants run shell commands with your full account authority, but their security filters are fundamentally flawed. Meet GuardFall: a vulnerability where 30-year-old shell injection tricks bypass modern safeguards. Read the full survey of 11 popular open-source agents to see if your tools are exposed, and learn the architectural ...
OWASP ranks Identity & Privilege Abuse #3 because it sets the blast radius for every other AI agent risk. Read our full technical guide to ASI03: the five identity abuse vectors, the Salesloft Drift breach case study, the attack lifecycle, and how to detect, prevent, and respond with task-scoped, time-bound ...
The AIRQ report scores 100 AI agents on attack surface, blast radius, and defenses. The AIRQ framework lets you assess your own stack. Read about the framework’s methodology and how to apply it in your organization.
June 2026’s agentic AI security roundup: coding agent RCEs, Microsoft Semantic Kernel flaws, a Copilot backdoor, and the newest agent defenses.
A SynJack attack tricks AI coding assistants into RCE through a symlink-disguised file copy. We tested six major tools. All were vulnerable. How it works and how to defend.
The definitive security guide for platform engineers, AI builders, and risk managersOWASP Agentic Security Initiative (ASI) Top 10 | — ASI02: Tool Misuse & Exploitation Your AI agent has root access. Does it deserve it? In December 2025, a developer asked Google’s AI coding assistant to “clear the project cache”. ...
Introducing Universal LLM Jailbreak approach. Subscribe for the latest AI Jailbreaks, Attacks and Vulnerabilities If you want more news and valuable insights on a weekly and even daily basis, follow our LinkedIn to join a community of other experts discussing the latest news. In the world of artificial intelligence (AI), [...]
