Security Research
In-depth studies on vulnerabilities and defenses in copilot and no-code applications
Security ResearchAgent-to-Agent Exploitation in the Wild: Observed Attacks on Moltbook
Agent-targeted social engineering and attacks observed on a live agent network
Avishai Efrat
Security ResearchAgentic Recon: Discovering and Mapping Public AI Agents
A Copilot Studio case study in agent discovery and capability mapping
Avishai Efrat
Security ResearchThreat Actors Are Already Scanning For Your AI Deployments and Middleware
What recent scanning activity means for your AI middleware and agentic deployments

Tamir Ishay SharbatandAvishai Efrat
Security ResearchExploring the Risks of ChatGPT’s Atlas Browser

Tamir Ishay SharbatandRaul Klugman-Onitza
Security ResearchInterpreting Jailbreaks and Prompt Injections with Attribution Graphs
Max Fomin
Security ResearchAppendix: Interpreting Jailbreaks and Prompt Injections with Attribution Graphs
Max Fomin
Security ResearchBreaking down AgentKit's Guardrails
A deep dive into OpenAI's AgentKit guardrails, how they are implemented, and where they fail
Stav Cohen
Security ResearchAnalyzing The Security Risks of OpenAI's AgentKit

Stav CohenandRaul Klugman-Onitza
Security ResearchPrompt Mines: 0-Click Data Corruption In Salesforce Einstein
Tamir Ishay Sharbat
Security ResearchAgentFlayer: Minimum Clicks, Maximum Leaks: Tilling ChatGPT’s Attack Surface
Exploiting ChatGPT with Language Alone: A Deep Dive into 0Click and 1Click Attacks.
Dmitry Lozovoy
Security ResearchAgentFlayer: ChatGPT Connectors 0click Attack
Tamir Ishay Sharbat
Security ResearchAgentFlayer: When a Jira Ticket Can Steal Your Secrets
TL;DR: A 0click attack through a malicious Jira ticket can cause Cursor to exfiltrate secrets from the repository or local file system.
Marina Simakov
Security ResearchAgentFlayer: When AIjacking Leads to Full Data Exfiltration in Copilot Studio
Tamir Ishay Sharbat
Security ResearchEchoLeak: A Reminder That AI Agent Risks Are Here to Stay
Marina Simakov
Security ResearchAgentFlayer: Discovery Phase of AI Agents in Copilot Studio
Tamir Ishay Sharbat