01   Break It

Vulnerability Research

We study how security fails when AI, data, and identities intersect, from intent drift to unauthorized access and code execution.

All
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Featured Research

PostGREShell: The database powering much of the internet had an open door for 12 years

Discover the critical PostgreSQL vulnerability (CVE-2026-6471) that allows low-privilege accounts to execute arbitrary code, risking major data breaches.

Sep 1, 2026
Vladimir Tokarev
Aug 25, 2026

Elad Luz,  Ofek Itach

Drive-By Agent Hijacking: One Website Visit, Persistent Model Poisoning

Aug 7, 2026

Vladimir Tokarev,  Ofek Itach,  Cyera Research

Breaking Local AI Runtimes: 10 vulnerabilities in the Engine Behind Your Open-Source Models

AI Supply Chain
Aug 7, 2026

Vladimir Tokarev,  Saar Pearl,  Cyera Research

Sandcastles, Not Sandboxes: How One Architectural Flaw Exposed Seven Products

AI Supply Chain
Cloud & SaaS Security
Jun 5, 2026
Vladimir Tokarev

Proto6: The Schema Was Not Supposed to Run

AI Supply Chain
May 15, 2026

Cyera Research,  Vladimir Tokarev

Four New OpenClaw Vulnerabilities: When AI Agents Become the Attacker's Execution Layer

Agent Security
Identity & Access
May 5, 2026

Dor Attias,  Cyera Research

Bleeding Llama: Critical Unauthenticated Memory Leak in Ollama

AI Supply Chain
Apr 29, 2026

Vladimir Tokarev,  Cyera Research

SplitSSHell - When a Comma Becomes Root How a Single Character Broke OpenSSH Certificate Authentication

Identity & Access
AI Supply Chain
Apr 7, 2026
Vladimir Tokarev

One Megabyte to Root: How a Size Check Broke Docker’s Last Line of Defense

Cloud & SaaS Security
Agent Security
Mar 26, 2026

Vladimir Tokarev,  Cyera Research

LangDrained: 3 Paths to Your Data Through LangChain, the World’s Most Popular AI Framework

AI Supply Chain
Feb 12, 2026

Dor Attias,  Research Labs

DESTRUCTURED - Critical Vulnerability in Unstructured.io (CVE-2025–64712)

AI Supply Chain
Feb 4, 2026
Research Labs

The OpenClaw Security Saga: How AI Adoption Outpaced Security Boundaries

Agent Security
Identity & Access
Jan 26, 2026

Vladimir Tokarev,  Research Labs

Cellbreak: Grist’s Pyodide Sandbox Escape and the Data-at-Risk Blast Radius

Cloud & SaaS Security
Data Security
Jan 13, 2026

Vladimir Tokarev,  Ofek Itach

N8Scape (Pyodide sandbox escape): 9.9 Critical Post-Auth RCE in n8n (CVE-2025-68668)

Cloud & SaaS Security
Identity & Access
Jan 7, 2026

Dor Attias,  Research Labs

Ni8mare  -  Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)

Cloud & SaaS Security
Identity & Access
Dec 23, 2025

Vladimir Tokarev,  Research Labs

Escaping the Guest: How Custom LLM Workflows Uncovered Critical VMSVGA Vulnerabilities

Cloud & SaaS Security
Nov 17, 2025

Vladimir Tokarev,  Research Labs

From Prompt to Exploit: Cyera Research Discloses Command & Prompt Injection Vulnerabilities in Gemini CLI

Agent Security
No Results

We couldn't find what you were looking for, try changing the filters

01
Portrait of a man with light brown hair and beard wearing a dark jacket over a navy shirt, standing against a plain gray background.
02
Smiling man with short brown hair, glasses, and light beard wearing a brown jacket over a black shirt, against a neutral background.
03
Woman with long curly brown hair, wearing a maroon ribbed sweater and gold hoop earrings, smiling against a plain light gray background.
04
Smiling man with glasses and a beard wearing a light gray buttoned shirt over a dark gray t-shirt against a plain light background.
05
Portrait of a smiling man with short brown hair and beard wearing a light blue button-up shirt over a gray t-shirt against a plain light background.

The team behind Cyera Research.

In relentless pursuit of understanding how data, identities, and agents interact, where they fail, and what those failures reveal.

About the team

Secure
the unknown

Book a demo