Security Research from the AI Agent Frontier

Links and materials for Your Copilot Is My Insider

Links, demos, tools and slides for RSAC 2025

Michael Bargury

Techniques from Zenity's GenAI Attacks Matrix Incorporated into MITRE ATLAS to Track Emerging AI Threats

TL;DR: Zenity has partnered with MITRE ATLAS to integrate GenAI Attacks Matrix techniques into the MITRE ATLAS framework, ensuring organizations stay ahead of evolving AI threats. As part of this collaboration, we introduce into ATLAS a new case study and 8 new attack techniques and 4 subtechniques.

AI Agents: The New Frontier for Security Researchers

Inbar Raz

The Power of One SSRF Vulnerability: A Multi-Platform Threat

Dmitry Lozovoy

Inside Salesforce Einstein: A Technical Background

Tamir Ishay Sharbat

Scaling AppSec With an SDL for Citizen Development

A blog version for the talk presented at BlueHat 2024

Michael BarguryandDon Willits

Links and materials for Scaling AppSec With an SDL for Citizen Development

Links, demos, tools and slides for BlueHat 2024

Michael Bargury

Sure, Let AI Browse the Internet—What Could Possibly Go Wrong?

Internet browsing for AI agents leads to 0click compromise but these mitigations can help

Michael Bargury

TTPs.ai for GenAI-Targeted Attacks

Guiding threat simulation and defense for Copilots and Agents

Michael Bargury

Over Permissions in Salesforce Einstein and Unexpected Consequences

Tamir Ishay Sharbat

Outsmarting Copilot: Creating Hyperlinks in Copilot 365

Dmitry Lozovoy

The Long and Winding Road of DLP Patches in Power Platform

Reviewing Microsoft's Fix for the 'All You Need Is Guest' DLP Bypass

Avishai Efrat

A Summary of Zenity Research Published at BlackHat 2024

New Attack Vectors Discovered for Initial Access and Post-Compromise

Michael Bargury

Copilot Vulnerable to RCE: A New Attack Vector Into The Enterprise

We Need To Address Promptware Now

Michael Bargury

Phantom References in Microsoft Copilot

Tamir Ishay SharbatandGal Malka