01 Break It

Blog de Cyera

We study how security fails when AI, data, and identities intersect, from intent drift to unauthorized access and code execution.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

PostGREShell: The database powering much of the internet had an open door for 12 years

Discover the critical PostgreSQL vulnerability (CVE-2026-6471) that allows low-privilege accounts to execute arbitrary code, risking major data breaches.

Vladimir Tokarev

Aug 25, 2026

Elad Luz, Ofek Itach

Drive-By Agent Hijacking: One Website Visit, Persistent Model Poisoning

Aug 7, 2026

Vladimir Tokarev, Ofek Itach, Cyera Research

Breaking Local AI Runtimes: 10 vulnerabilities in the Engine Behind Your Open-Source Models

Aug 7, 2026

Vladimir Tokarev, Saar Pearl , Cyera Research

Sandcastles, Not Sandboxes: How One Architectural Flaw Exposed Seven Products

Jun 5, 2026

Vladimir Tokarev

Proto6: The Schema Was Not Supposed to Run

May 15, 2026

Cyera Research, Vladimir Tokarev

Four New OpenClaw Vulnerabilities: When AI Agents Become the Attacker's Execution Layer

May 5, 2026

Dor Attias, Cyera Research

Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama

Apr 29, 2026

Vladimir Tokarev, Cyera Research

SplitSSHell - When a Comma Becomes Root How a Single Character Broke OpenSSH Certificate Authentication

Apr 7, 2026

Vladimir Tokarev

One Megabyte to Root: How a Size Check Broke Docker’s Last Line of Defense

Mar 26, 2026

Vladimir Tokarev, Cyera Research

LangDrained: 3 Paths to Your Data Through LangChain, the World’s Most Popular AI Framework

Feb 12, 2026

Dor Attias, Research Labs

DESTRUCTURED - Critical Vulnerability in Unstructured.io (CVE-2025–64712)

Feb 4, 2026

Research Labs

The OpenClaw Security Saga: How AI Adoption Outpaced Security Boundaries

Jan 26, 2026

Vladimir Tokarev, Research Labs

Cellbreak: Grist’s Pyodide Sandbox Escape and the Data-at-Risk Blast Radius

Jan 13, 2026

Vladimir Tokarev, Ofek Itach

N8Scape (Pyodide sandbox escape): 9.9 Critical Post-Auth RCE in n8n (CVE-2025-68668)

Jan 7, 2026

Dor Attias, Research Labs

Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)

Dec 23, 2025

Vladimir Tokarev, Research Labs

Escaping the Guest: How Custom LLM Workflows Uncovered Critical VMSVGA Vulnerabilities

Nov 17, 2025

Vladimir Tokarev, Research Labs

Du prompt à l'exploitation : Cyera Research révèle des vulnérabilités d'injection de commandes et de prompts dans Gemini CLI

Aucun résultat

Nous n'avons pas trouvé ce que vous cherchiez. Essayez de modifier les filtres.

01

Portrait of a man with light brown hair and beard wearing a dark jacket over a navy shirt, standing against a plain gray background.

02

Smiling man with short brown hair, glasses, and light beard wearing a brown jacket over a black shirt, against a neutral background.

03

Woman with long curly brown hair, wearing a maroon ribbed sweater and gold hoop earrings, smiling against a plain light gray background.

04

Smiling man with glasses and a beard wearing a light gray buttoned shirt over a dark gray t-shirt against a plain light background.

05

Portrait of a smiling man with short brown hair and beard wearing a light blue button-up shirt over a gray t-shirt against a plain light background.

The team behind Cyera Research.

In relentless pursuit of understanding how data, identities, and agents interact, where they fail, and what those failures reveal.