Author
Jason Miller
6 min read
Promptware in the Inbox: The Zero-Click Email Chain That Hijacks AI Agents
Learn how zero-click prompt injection emails hijack AI agents through hidden MIME content, from EchoLeak to AgentFlayer, and which controls break the chain.…
12 min read
Seven Editions, Zero Dashboard Warnings: Triaging the miniOrange SAML Forgery Bugs
Triage guide for the miniOrange SAML SSO forgery bugs: find your edition and version, patch or deactivate, hunt for forged admin logins, and clean up.…
13 min read
Your Agent Demo Is Lying to You: A Map of the Production Gap
Your Agent Demo Is Lying to You: A Map of the Production Gap…
12 min read
Your AI Agents Are One Audit Question Away From a Finding
Your AI Agents Are One Audit Question Away From a Finding…
11 min read
One Cropper, Three Coordinates: Finding the Android Image Overwrite in Your Dependency Tree
One Cropper, Three Coordinates: Finding the Android Image Overwrite in Your Dependency Tree…
12 min read
One Schema Name, Every Stored Credential: CVE-2026-33696 and the n8n Blast Radius
The reader gains concrete detection queries, patching verification steps, and an understanding of the full attack chain (including the overlooked XML node).…
10 min read
Memory Made Chatbots Useful. It Also Made Them Gossips.
Understands contextual integrity as a new, undetectable-by-access-controls privacy failure mode, gets the CIMemories benchmark evidence (up to 69% violation.…
12 min read
One ../ From Copilot: The CVE-2026-32193 Chain, Rebuilt for AKS Defenders
Readers get the full path-traversal-to-Copilot-hijack attack chain that public CVE coverage missed, plus concrete node-pool patching commands and detection.…
11 min read
The Signature Was Valid and the Boot Was Still Compromised
Readers gain a five-class taxonomy of non-cryptographic Secure Boot failure modes, concrete mitigation and detection steps for two 2026 CVEs, and a prioritized.…
10 min read
Your Dashboard Might Be Someone's Proxy Exit: a Field Check for the DoFun Head Unit Botnet
The reader understands how the DoFun head unit botnet operates and gets a practical ten-minute workflow to check for infection, remove the payload, and contain.…
12 min read
"No Watermark Detected" Tells You Nothing. The SynthID Removal Toolchain Is Why
Readers learn why a negative watermark result carries zero evidentiary weight, how mature the SynthID removal toolchain has become, and how to structure.…
10 min read
Your Sent Items Folder Is a Phishing Kit Now
Understand how attackers turn compromised mailboxes and public writing samples into flawless impersonations, and learn which controls (phishing-resistant MFA.…