Advanced Security Research & Insights
Independent security research on AI agent frameworks, OAuth supply-chain vulnerabilities, and defensive strategies for enterprise AI programs and critical infrastructure.
Latest research
Curated research briefs, tooling, and frameworks for AI and application security teams.
Mapping the LLM Threat Surface for Enterprise Security
A systematic framework for assessing and defending against LLM-specific threat vectors across enterprise environments.
OAuth Supply-Chain Security: From the Salesloft/Drift Breach to Zero Trust
Applied research on OAuth supply-chain vulnerabilities, analyzing the UNC6395 campaign that compromised 700+ Salesforce environments via stolen tokens from Salesloft/Drift. Includes GWAPT-aligned penetration testing methodology.
Autonomous Defense: AI Agent Playbooks for Incident Response
Research on how AI agents can execute defensive playbooks, automate ticket resolution, and augment human responders in security operations.
Research by topic
Explore curated research tracks spanning secure AI development, red team methodology, and governance-ready tooling.
LLM Threats
7 curated resources
Model Context Protocol
4 curated resources
Supply Chain
7 curated resources
Automation & Tools
9 curated resources
Latest insights
Strategic viewpoints for CISOs, AI security leads, and product teams.
Global Scam Alert 2026 — Five Countries, One Playbook Against Your Family
The United States, United Kingdom, Australia, Canada, and India each report record fraud losses in 2026 — under different names, but with one identical move that empties the account. Here is that move, and the one kitchen-table habit that stops every version of it.
WhatsApp Family Emergency Scams — 'I Have a New Number'
'Mummy, my phone broke, this is my new number, I need money urgently' — it sounds exactly like your child. The scam hitting Panjabi family WhatsApp groups now, and the one rule that defeats it.
Tech Support Scams Target Our Elders — What Every Panjabi Family Needs to Know
A caller claims to be Microsoft Support; your parent grants remote access and their bank account is drained. How tech-support scams work — and the single rule that defeats every one.