Autonomous Copilots: Is your Copilot flying solo?

Links and materials for Hacking Your Enterprise Copilot: A Direct Guide to Indirect Prompt Injections

Zenity Research Published at RSAC 2025

Copilots and agents are a new access vector; How to build an AppSec program that scales to the level of citizen development

Links and materials for Scaling AppSec With an SDLC for Citizen Development

Links, demos, tools and slides for RSAC 2025

Links and materials for Your Copilot Is My Insider

Links, demos, tools and slides for RSAC 2025

Techniques from Zenity's GenAI Attacks Matrix Incorporated into MITRE ATLAS to Track Emerging AI Threats

TL;DR: Zenity has partnered with MITRE ATLAS to integrate GenAI Attacks Matrix techniques into the MITRE ATLAS framework, ensuring organizations stay ahead of evolving AI threats. As part of this collaboration, we introduce into ATLAS a new case study and 8 new attack techniques and 4 subtechniques.

AI Agents: The New Frontier for Security Researchers

The Power of One SSRF Vulnerability: A Multi-Platform Threat

Inside Salesforce Einstein: A Technical Background

Scaling AppSec With an SDL for Citizen Development

A blog version for the talk presented at BlueHat 2024

Links and materials for Scaling AppSec With an SDL for Citizen Development

Links, demos, tools and slides for BlueHat 2024

Sure, Let AI Browse the Internet—What Could Possibly Go Wrong?

Internet browsing for AI agents leads to 0click compromise but these mitigations can help