AI Can Now Find and Exploit Zero-Days: Inside the Google, Anthropic and OpenAI Cyber Models
Three AI labs unveiled models that find zero-days almost in unison, then locked access. The facts, and what it means for defenders.
// research & write-ups
blog
CI Injection Explained: Real Breaches and How agentpipe Stops It
Four real CI/CD breaches of 2025 (tj-actions, Nx, Amazon Q, GitHub MCP) and how agentpipe and agentpipe SaaS catch CI injection (clinejection) before secrets leak.
agentpipe v0.9: the CI/CD security scanner now runs inside your pipeline
We shipped agentpipe v0.9, and it is a big one. agentpipe started life as a local CI/CD security scanner you ran by hand from a terminal. It now lives inside your pipeline and reviews…
10 Real AI Agent Vulnerabilities of 2025 (and How to Defend Against Each)
2025 was the year AI agent security stopped being a conference slide and turned into real incidents: live CVEs, leaked secrets, wiped production databases. An AI coding agent reads any tool description as a…
AI Agent Security: Three Lines of Defense That Cover Each Other’s Blind Spots
An AI coding agent is like an intern you handed every key on day one: files, shell, production access, tokens. Except the intern gets tired and asks twice, while the agent executes everything at…
Iran Shut a UK Power Plant for Four Days: An OT Security Breakdown
Iran-linked hackers took a UK power plant offline for four days and hit wastewater plants in 12 US states. Why OT is exposed and what to do about it.
Gitea CVE-2026-60004: RCE via a Planted Git Hook on Your Own Git Server
CVE-2026-60004 in Gitea (CVSS 9.8): repo write access to a planted git hook to RCE as the service account. Default open registration makes it near-unauth.
Airlock breach: Reconstruct an AI-Agent Incident From the Log You Already Have
Airlock 0.5 adds breach: from your existing audit log it shows what the agent touched, what left the machine, and exactly which credentials to rotate.
The ChainDrop npm Worm: 444 Packages, Credential Theft, and an Ethereum-Anchored C2
The self-propagating ChainDrop worm (a Shai-Hulud variant) poisoned 444 npm packages with ~2B monthly downloads, harvesting npm/GitHub/cloud/Vault credentials and rotating C2 via Ethereum. Supply-chain defense breakdown.
Entra ID CVE-2026-69836 (CVSS 10.0): A Cloud-Identity RCE You Can’t Patch
Microsoft disclosed a maximum-severity Entra ID flaw: unauthenticated RCE via unsafe deserialization, CVSS 10.0. Microsoft fixed it server-side — here's what defenders should still do.