Security Research from the AI Agent Frontier

AgentFlayer: When AIjacking Leads to Full Data Exfiltration in Copilot Studio

Tamir Ishay Sharbat

I Just Wanted to Take a Note — and Your Token Came Along

Dmitry Lozovoy

EchoLeak: A Reminder That AI Agent Risks Are Here to Stay

AgentFlayer: Discovery Phase of AI Agents in Copilot Studio

Tamir Ishay Sharbat

LLM vs. LLM: It's a MAD world.

Inbar Raz

AI Agents & 0-Click Exploits: The New Battle Ground for AI Security

Tamir Ishay Sharbat

Autonomous Copilots: Is your Copilot flying solo?

Inbar Raz

Links and materials for Hacking Your Enterprise Copilot: A Direct Guide to Indirect Prompt Injections

Tamir Ishay Sharbat

Zenity Research Published at RSAC 2025

Copilots and agents are a new access vector; How to build an AppSec program that scales to the level of citizen development

Michael Bargury

Links and materials for Scaling AppSec With an SDLC for Citizen Development

Links, demos, tools and slides for RSAC 2025

Michael Bargury

Links and materials for Your Copilot Is My Insider

Links, demos, tools and slides for RSAC 2025

Michael Bargury

Techniques from Zenity's GenAI Attacks Matrix Incorporated into MITRE ATLAS to Track Emerging AI Threats

TL;DR: Zenity has partnered with MITRE ATLAS to integrate GenAI Attacks Matrix techniques into the MITRE ATLAS framework, ensuring organizations stay ahead of evolving AI threats. As part of this collaboration, we introduce into ATLAS a new case study and 8 new attack techniques and 4 subtechniques.

AI Agents: The New Frontier for Security Researchers

Inbar Raz

The Power of One SSRF Vulnerability: A Multi-Platform Threat

Dmitry Lozovoy

Inside Salesforce Einstein: A Technical Background

Tamir Ishay Sharbat