Researchers Hedi Ingber and Aviyam Ivgi of Stealth presented CoreBreak at Black Hat USA 2026, revealing a structural vulnerability in AI agent infrastructure that bypasses model-level defenses by expl…
Researchers Hedi Ingber and Aviyam Ivgi of Stealth presented CoreBreak at Black Hat USA 2026, a vulnerability pattern in AI agent dispatch layers that allows tool execution without a legitimate model …
Adversa AI disclosed on July 15, 2026 a new attack called DeepJack that exploits a flaw in Cursor IDE's deeplink handler to silently install an attacker-controlled MCP server on a developer's machine …
Over 30 CVEs were reported against MCP deployments in the first 60 days of 2026, with Adversa AI finding 38% of 500+ MCP servers had no authentication on critical endpoints and 43% were vulnerable to …
Microsoft released two open-source tools in May — RAMPART and Clarity — to help developers test AI agents for adversarial failure modes before deployment. RAMPART is a pytest-native framework for writ…
On June 30, Adversa AI researcher Omer Ben Simon published GuardFall, a class of shell injection bypasses that defeats the command guards in 10 of 11 popular open-source AI coding agents, which collec…
AI security researchers at Adversa AI discovered a structural security flaw called GuardFall that exploits decades-old Bash shell tricks to bypass safeguards in most open source AI coding agents. Atta…