Research — Cybersecurity Research

27 articlesUpdated 23 Oct 2026

ResearchCloud & SaaS

OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection

A critical vulnerability in OpenCode allows malicious Model Context Protocol servers to execute arbitrary shell commands on Windows and WSL hosts during OAuth.

23 Oct 202612 min read

Priya Raman

ResearchBanking & Fintech
Singapore CSA Mandates Quantum-Safe Cryptographic Migration Roadmap for Critical Information Infrastructure
Singapore's Cyber Security Agency releases the National Quantum-Safe Migration Roadmap at SICW, setting strict 2031-2035 deadlines for Critical Infrastructure operators.
Priya Raman21 Oct 202614 min read
ResearchCloud & SaaS
Claude Solves 25-Year NIST Elliptic Curve Mystery, Debunking NSA Backdoor Theories
Anthropic's Claude reconstructed the 1997 Unix timestamps behind NIST ECDSA curve seeds, proving standard curves were randomly generated without an NSA backdoor.
Priya Raman18 Oct 202612 min read
ResearchCloud & SaaS
Google GTIG: AI-Found Bugs Skew Toward Code Execution as Exploited Vulnerabilities Outpace All of 2025
GTIG's AI-era report: CVE disclosures doubled in 2026, 141 bugs exploited by August vs 127 in 2025, and 50% of AI-discovered flaws lead to RCE, per Google.
Priya Raman3 Oct 20267 min read
ResearchCloud & SaaS
Bouncy Castle C# Vulnerable to Subgroup Confinement Attack Breaking Diffie-Hellman Key Agreement (CVE-2026-63569)
A critical input validation deficiency in Bouncy Castle C# DHAgreement enables attackers to recover private keys and forge agreed cryptographic values.
Mei-Lin Chen2 Oct 20269 min read
ResearchCloud & SaaS
OpenAI Disrupts Coordinated Adversarial Distillation Campaign Illicitly Harvesting Frontier AI Reasoning Traces
OpenAI dismantled a coordinated campaign that weaponized cross-model replay queries across 15,000 accounts to illicitly extract encrypted chain-of-thought traces.
Aisha Noor2 Oct 20269 min read
ResearchCloud & SaaS
Model Reasoning Trace Interception: Exfiltrating Proprietary Chain-of-Thought Data in Frontier AI
New research reveals side-channel and prompt-leakage vectors capable of intercepting hidden chain-of-thought reasoning tokens in frontier reasoning models.
CST Editorial Desk30 Sep 202610 min read
ResearchCloud & SaaS
Self-Replicating AI Worms: Dissecting Autonomous Cross-Agent Prompt Injection Propagation
Researchers demonstrate Morris II style self-replicating adversarial prompt worms propagating autonomously across connected LLM agents and multi-agent workflows.
CST Editorial Desk30 Sep 202612 min read
ResearchIndustrial & OT
Industrial Ethernet Determinism Breakdown: Manipulating Level 1 Fieldbuses Under IEC 62443 Frameworks
Original OT research examining deterministic Industrial Ethernet fieldbus vulnerabilities under IEC 62443, demonstrating microsecond packet injection risks.
CST Editorial Desk28 Sep 202611 min read
ResearchCloud & SaaS
MicroVM Isolation Deep Dive: AWS Firecracker vs Google gVisor Kernel Boundaries
An architectural research study comparing AWS Firecracker and Google gVisor, analyzing hypervisor boundaries, KVM virtio mechanics, and container breakout vectors.
Aisha Noor28 Sep 202610 min read
ResearchCloud & SaaS
Cascading Failure in Multi-Agent AI Swarms: Indirect Prompt Injection Across Autonomous Tool-Calling Pipelines
Deep-dive security research demonstrating how indirect prompt injection exploits Model Context Protocol (MCP) to trigger cascading failures across multi-agent swarms.
Daniel Okafor28 Sep 202612 min read
ResearchBanking & Fintech
SEC 8-K Cyber Disclosures Study Maps Materiality Gap and Regulatory Extortion
An empirical data study analyzing corporate SEC Form 8-K cyber disclosures, examining the Item 8.01 materiality gap and threat actor regulatory weaponization.
CST Editorial Desk28 Sep 202610 min read
ResearchBanking & Fintech
Post-Quantum Cryptography Migration: Defending Financial Clearing Networks Against Harvest-Now-Decrypt-Later Interception
An architectural research study on NIST FIPS 203/204/205 standards, evaluating hybrid TLS 1.3 key exchange to safeguard financial clearing from quantum decryption.
CST Editorial Desk28 Sep 202611 min read
ResearchCloud & SaaS
vLLM Multimodal Special Token Injection Triggers Remote Engine Crash and Service Denial CVE-2026-44222
High-severity flaw CVE-2026-44222 in vLLM allows remote unauthenticated users to crash distributed GPU inference clusters via crafted multimodal tokens.
CST Editorial Desk23 Sep 202615 min read
ResearchCloud & SaaS
Langflow AI Pipeline Remote Code Execution Flaws Exploited in Enterprise LLM Deployments
CISA adds critical Langflow AI vulnerabilities CVE-2026-0770 and CVE-2026-55255 to KEV catalog as threat actors weaponize agentic pipeline execution flaws.
Aisha Noor18 Sep 202611 min read
ResearchCloud & SaaS
Agentic AI Security Breakdown: How Indirect Prompt Injections Hijack Autonomous Tool-Calling Agents
Analysis of emerging frontier AI threat vectors: how indirect prompt injections in untrusted documents hijack tool-calling autonomous LLM agents.
Priya Raman17 Sep 202614 min read
ResearchCloud & SaaS
CISA, NSA, and FBI Warn Critical Infrastructure of Advanced AI Model Extraction Campaigns
A joint cybersecurity advisory from CISA, NSA, and FBI alerts defense contractors and cloud vendors to sophisticated state-sponsored AI model extraction campaigns.
Daniel Okafor14 Sep 20269 min read
$3D technical illustration of fractured Microsoft Defender security shield and race condition threads exposing NT AUTHORITY SYSTEM core access$
ResearchCloud & SaaS
'ShieldCrash' exploit bypasses Microsoft Defender patch, enabling local SYSTEM file access
A zero-day exploit dubbed ShieldCrash bypasses Microsoft Defender’s latest patches, weaponizing a TOCTOU race condition in the engine to read files as SYSTEM.
Mei-Lin Chen14 Sep 20267 min read
ResearchGov & Defence
Anthropic says AI is moving from assistant to orchestrator in cyber operations
Anthropic’s September threat report describes how actors used Claude for reconnaissance, intrusion support, tool rebuilding and parallelized cyber operations.
Mei-Lin Chen12 Sep 20267 min read
ResearchCloud & SaaS
GitSpawn flaws in AI coding agents execute arbitrary code from malicious repository configurations
Manifold Security discovers GitSpawn: eight vulnerabilities across seven AI coding tools (Claude Code, Cursor, Codex) that execute attacker code from repository .git/config.
Priya Raman12 Sep 20267 min read
ResearchEducation & Academia
Eight new ransomware brands in one week: why tracking group names has stopped working
One tracker logged 315 leak-site posts from 40 groups in a single August week, eight of them new. Brand-based detection cannot keep pace. Here is what to instrument instead.
Daniel Okafor10 Sep 20266 min read
ResearchCloud & SaaS
BlueMoon Exploit Kit: Chrome V8 Zero-Day Chained with Windows Kernel Escalation
Proofpoint disclosed the BlueMoon exploit kit weaponizing Google Chrome V8 flaws (CVE-2026-87491) alongside Windows kernel privilege escalation in state-aligned espionage attacks.
Mei-Lin Chen9 Sep 20266 min read
ResearchCloud & SaaS
DeepSeek Harness Vulnerability Allowed AI Coding Agents to Disable Their Sandbox
OX Security and VulnCheck disclosed CVE-2026-82533 in DeepSeek Harness, where prompt injection allowed sandboxed AI coding agents to disable their own security isolation.
Mei-Lin Chen9 Sep 20265 min read
ResearchEducation & Academia
Iran-Linked Screening Serpens Shipped Six RAT Builds in Ten Weeks
Unit 42 documented six new RAT variants from Iran-nexus Screening Serpens between February and April 2026. The hashes rotate; the AppDomainManager config file does not.
Mei-Lin Chen9 Sep 20266 min read