Security Research from the AI Agent Frontier

Research, tools, and talks for breaking and securing Agents

9 ThreatsSweeping · 2h ago

FeaturedAug 6, 2026

Attackers Target Agents via The Skill Supply Chain

Michael Bargury

All research88 Security Research48 Talks10 Tools10 Engineering1

Aug 9, 2024Talks
Links and materials for Living off Microsoft Copilot
Links, source code, tools and slides for BlackHat USA 2024
Michael Bargury
Aug 8, 2024Security Research
Indirect Prompt Injection: Advanced Manipulation Techniques
Tamir Ishay Sharbat
Aug 7, 2024Talks
Links and materials for 15 Ways to Break Your Copilot
Links, source code, tools and slides for BlackHat USA 2024
Michael Bargury
Aug 6, 2024
Indirect Prompt Injection: From Initial Success to Robustness
Tamir Ishay Sharbat
Aug 5, 2024Talks
Research Drop for Hacker Summer Camp 2024
More information on hacking Microsoft Copilot, Copilot Studio, powerpwn, and what to do next
Michael Bargury
Aug 3, 2024Security Research
RAG Poisoning: All You Need is One Document
Tamir Ishay Sharbat
Jul 31, 2024Security Research
Phishing is Dead, Long Live Spear Phishing
Lana Salameh
Jul 29, 2024Security Research
How Copilot Reads Your Emails and Teams Messages
Tamir Ishay Sharbat
Jul 15, 2024Security Research
A Look Inside Microsoft Copilot’s RAG System
Tamir Ishay Sharbat
Jul 9, 2024Security Research
Access Copilot for M365 through the terminal
Lana Salameh
Jul 8, 2024Tools
power-pwn
Power Pwn is an offensive and defensive security toolset for Microsoft Power Platform.
Zenity Labs
Jul 5, 2024Security Research
Stealing Copilot's System Prompt
Tamir Ishay Sharbat
Jul 4, 2024Security Research
Inside Microsoft 365 Copilot: A Technical Breakdown
Gal Malka