Security research

In-depth studies on vulnerabilities and defenses in copilot and no-code applications

TalksSecurity researchToolsEngineering
Security researchSecurity research
Exploring the Risks of ChatGPT’s Atlas Browser

Exploring the Risks of ChatGPT’s Atlas Browser

Tamir Ishay Sharbat
Raul Klugman-Onitza
Tamir Ishay Sharbat, +1
Security researchSecurity research
Appendix

Appendix

Interpreting Jailbreaks and Prompt Injections with Attribution Graphs

Max Fomin
Max Fomin
Security researchSecurity research
Interpreting Jailbreaks and Prompt Injections with Attribution Graphs

Interpreting Jailbreaks and Prompt Injections with Attribution Graphs

Max Fomin
Max Fomin
Security researchSecurity research
Breaking down AgentKit's Guardrails

Breaking down AgentKit's Guardrails

A deep dive into OpenAI's AgentKit guardrails, how they are implemented, and where they fail

Stav Cohen
Stav Cohen
Security researchSecurity research
Analyzing The Security Risks of OpenAI's AgentKit

Analyzing The Security Risks of OpenAI's AgentKit

Stav Cohen
Raul Klugman-Onitza
Stav Cohen, +1
Security researchSecurity research
Prompt Mines: 0-Click Data Corruption In Salesforce Einstein

Prompt Mines: 0-Click Data Corruption In Salesforce Einstein

Tamir Ishay Sharbat
Tamir Ishay Sharbat
Security researchSecurity research
AgentFlayer: Minimum Clicks, Maximum Leaks: Tilling ChatGPT’s Attack Surface

AgentFlayer: Minimum Clicks, Maximum Leaks: Tilling ChatGPT’s Attack Surface

Exploiting ChatGPT with Language Alone: A Deep Dive into 0Click and 1Click Attacks.

Dmitry Lozovoy
Dmitry Lozovoy
Security researchSecurity research
AgentFlayer: ChatGPT Connectors 0click Attack

AgentFlayer: ChatGPT Connectors 0click Attack

Tamir Ishay Sharbat
Tamir Ishay Sharbat
Security researchSecurity research
AgentFlayer: When a Jira Ticket Can Steal Your Secrets

AgentFlayer: When a Jira Ticket Can Steal Your Secrets

TL;DR: A 0click attack through a malicious Jira ticket can cause Cursor to exfiltrate secrets from the repository or local file system.

Marina Simakov
Marina Simakov
Security researchSecurity research
AgentFlayer: When AIjacking Leads to Full Data Exfiltration in Copilot Studio

AgentFlayer: When AIjacking Leads to Full Data Exfiltration in Copilot Studio

Tamir Ishay Sharbat
Tamir Ishay Sharbat
Security researchSecurity research
EchoLeak: A Reminder That AI Agent Risks Are Here to Stay

EchoLeak: A Reminder That AI Agent Risks Are Here to Stay

Marina Simakov
Marina Simakov
Security researchSecurity research
AgentFlayer: Discovery Phase of AI Agents in Copilot Studio

AgentFlayer: Discovery Phase of AI Agents in Copilot Studio

Tamir Ishay Sharbat
Tamir Ishay Sharbat