AgentForger, Part 2: The Autonomous Insider

AgentForger, Part 1: ChatGPT Cross-Site Agent Forgery

PerplexedBrowser: How Attackers Can Hijack Comet to Takeover your 1Password Vault

One Calendar Invite. Your Entire Vault. Zero Clicks.

PerplexedBrowser: Perplexity’s Agent Browser Can Leak Your PC's Local Files

Local Files Are No Longer Safe.

Turning Moltbook Into a Global Botnet Map

How Untrusted Content Triggered 1,000+ Agent Endpoints Worldwide and Exposed Moltbook’s Faulty Design

Perplexity Comet: A Reversing Story

A deeper look into an agentic browser's inner workings

OpenClaw or OpenDoor?

Indirect Prompt Injection makes OpenClaw vulnerable to Backdoors and much more.

Agent-to-Agent Exploitation in the Wild: Observed Attacks on Moltbook

Agent-targeted social engineering and attacks observed on a live agent network

Agentic Recon: Discovering and Mapping Public AI Agents

A Copilot Studio case study in agent discovery and capability mapping

Threat Actors Are Already Scanning For Your AI Deployments and Middleware

What recent scanning activity means for your AI middleware and agentic deployments

Exploring the Risks of ChatGPT’s Atlas Browser

Appendix: Interpreting Jailbreaks and Prompt Injections with Attribution Graphs

Interpreting Jailbreaks and Prompt Injections with Attribution Graphs

Breaking down AgentKit's Guardrails

A deep dive into OpenAI's AgentKit guardrails, how they are implemented, and where they fail

Analyzing The Security Risks of OpenAI's AgentKit

Prompt Mines: 0-Click Data Corruption In Salesforce Einstein

AgentFlayer: Minimum Clicks, Maximum Leaks: Tilling ChatGPT’s Attack Surface

Exploiting ChatGPT with Language Alone: A Deep Dive into 0Click and 1Click Attacks.

AgentFlayer: ChatGPT Connectors 0click Attack

AgentFlayer: When a Jira Ticket Can Steal Your Secrets

TL;DR: A 0click attack through a malicious Jira ticket can cause Cursor to exfiltrate secrets from the repository or local file system.

AgentFlayer: When AIjacking Leads to Full Data Exfiltration in Copilot Studio

EchoLeak: A Reminder That AI Agent Risks Are Here to Stay

AgentFlayer: Discovery Phase of AI Agents in Copilot Studio

AI Agents & 0-Click Exploits: The New Battle Ground for AI Security

Zenity Research Published at RSAC 2025

Copilots and agents are a new access vector; How to build an AppSec program that scales to the level of citizen development

Links and materials for Scaling AppSec With an SDLC for Citizen Development

Links, demos, tools and slides for RSAC 2025