Retour aux laboratoires de recherche

Blogs de recherche

September 1, 2026

PostGREShell: The database powering much of the internet had an open door for 12 years

August 13, 2026

The Hidden Attack Surface of Agentic AI: Securing AI Agent Integration Platforms

Breaking Local AI Runtimes: 10 vulnerabilities in the Engine Behind Your Open-Source Models

Sandcastles, Not Sandboxes: How One Architectural Flaw Exposed Seven Products

Proto6: The Schema Was Not Supposed to Run

Agent-Inflicted Damage: Inside the Real-World Failures of Enterprise AI Systems

Four New OpenClaw Vulnerabilities: When AI Agents Become the Attacker's Execution Layer

The New Data Breach Playbook: How ShinyHunters Exploit Access

Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama

SplitSSHell - When a Comma Becomes Root How a Single Character Broke OpenSSH Certificate Authentication

The Data Taxonomy Illusion: Why Security Teams Are Solving the Wrong Problem

Compromise Once, Breach Everywhere. ‍The Age of Mega-Supply Chain Attacks

One Megabyte to Root: How a Size Check Broke Docker’s Last Line of Defense

LangDrained: 3 Paths to Your Data Through LangChain, the World’s Most Popular AI Framework

96% of Enterprise Permissions Go Unused. AI Agents Won't Leave Them That Way.

That File in Teams? Your Entire Organization Might Be Able to Access It

When Language Becomes the Attack Vector: The Lethal Trifecta of AI Agents

The End of Volume-Based Severity: Rebuilding Risk Assessment with AI

February 23, 2026

The Long-Lived Risk of Malicious OAuth Applications: A Practical Threat Hunting Guide for M365

February 12, 2026

DESTRUCTURED - Critical Vulnerability in Unstructured.io (CVE-2025–64712)

February 5, 2026

Detection Is Fast. Understanding Is Not. Why File-Access Incidents Stall - and How Impact Clarity Changes the Outcome

February 4, 2026

The OpenClaw Security Saga: How AI Adoption Outpaced Security Boundaries

January 26, 2026

Cellbreak: Grist’s Pyodide Sandbox Escape and the Data-at-Risk Blast Radius

January 13, 2026

N8Scape (Pyodide sandbox escape): 9.9 Critical Post-Auth RCE in n8n (CVE-2025-68668)

January 7, 2026

Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)

January 6, 2026

The End of Classification as We Know It: Data Awareness Over Data Labels

December 23, 2025

Escaping the Guest: How Custom LLM Workflows Uncovered Critical VMSVGA Vulnerabilities

December 22, 2025

Why DSPM Has Moved From Buzzword to Board‑Level Mandate - and How Our New Guide Can Help

December 9, 2025

Assessing the Top Data Security Risks in AWS Environments

December 5, 2025

The One Account That Breaks Everything: How Identity Outliers Create Explosive Risk

December 2, 2025

Access Is the New Exposure: Why Knowing Who Can Reach Your Data Matters More Than Where It Lives

November 25, 2025

Seeing the Forest: Why File-Level Classification Is the Missing Layer in Data Security

November 20, 2025

Atlas and the Future of the Enterprise Browser

November 17, 2025

Du prompt à l'exploitation : Cyera Research révèle des vulnérabilités d'injection de commandes et de prompts dans Gemini CLI

November 12, 2025

Are Your Salesforce Permissions Protecting You - or Exposing You?

September 29, 2025

Smarter at Scale: Why AI-Native Classification Techniques Outperform Exhaustive Scanning

September 29, 2025

AI in the Workplace: Beyond ChatGPT and Into the Era of MCP

September 29, 2025

Cyera Research Labs Reveals the Top Tactics to Reduce Data Risk in Healthcare

September 29, 2025

83% Use AI; Only 13% Have Visibility - Cyera’s 2025 State of AI Data Security Report