Security Research
In-depth studies on vulnerabilities and defenses in copilot and no-code applications
Security ResearchPleaseFix: Versión en español.
Las diapositivas de la charla de ekoparty 2026
Inbar Raz
Security ResearchAgentCorruption: How A Single Prompt Collapsed The Entire Cloud Security Model
Tamir Ishay SharbatandLana Salameh
Security ResearchAgentCorruption: Initial IMDS Access
How a single prompt to a public-facing AgentCore agent exposed the instance metadata endpoint, the agent's cloud identity, and its container image: the foothold for everything that follows in this series.
Lana SalamehandDmitry Lozovoy
Security ResearchAgentCorruption: One Role to Rule Them All
Exploring what the agent's default execution role and stolen credentials can actually do, and how they became an entry point to the entire region - discovering and invoking other agents, reading, deleting and hijacking private conversations through chat history tampering, and more.
Lana SalamehandDmitry Lozovoy
Security ResearchRemote Browser Execution: How Swarms Abused Public Web Scanners to Extract Russian Government Data
Malicious techniques that rogue AI agents use to abuse infrastructure and bypass sandbox restrictions
Mike TakahashiandAvishai Efrat
Security ResearchSalesBleed: Indirect Prompt Injection and 0-Click Data Exfiltration on Agentforce
0-click data exfiltration in Agentforce through Web-to-Lead
Alex Apostolovand 3 others
Security ResearchSalesBleed: Hijacking Agentforce in Slack for Anonymous Phishing Attacks
Identity Impersonation using Agentforce in Slack
João Donatoand 3 others
Security ResearchURL Laundering by Rogue Agents: Newly Discovered Messages and Sandbox Circumvention by AI Swarms
We found a thousand new messages and additional sandbox circumvention methods used by the collusion.wiki rogue AI agent swarms
Avishai Efrat
Security ResearchA Read-Only Account is All it Takes to Own a LiteLLM Server
Attackers are abusing a known flaw in Litellm’s admin API to escalate from a low privilege account to full server takeover
Avishai EfratandAyush RoyChowdhury
Security ResearchMapping the AI Attack Surface Before You Touch It
How passive recon and OSINT surface agents and AI systems
Avishai EfratandRoey Ben Chaim
Security ResearchClaude in Chrome: From alert(1) to Full Account Takeover
Raul Klugman-OnitzaandJoão Donato- Security Research
Account Takeover via Claude in Chrome: A Technical Deep Dive
Raul Klugman-OnitzaandJoão Donato 
Security ResearchGrand Theft Atlas
How we hijacked ChatGPT Atlas with one planted X comment, to phish the victim's WhatsApp contacts and buy ourselves an Amazon order on their card
Stav Cohen
Security ResearchAgentForger, Part 2: The Autonomous Insider
Mike Takahashi
Security ResearchAgentForger, Part 1: ChatGPT Cross-Site Agent Forgery
Mike Takahashi