Red Teaming & Offensive Research

Defending agentic systems requires understanding how they actually break—not in theory, but under deliberate, adversarial pressure. This category covers offensive techniques, red-team methodologies, and hands-on exploit research specific to autonomous agent architectures: prompt injection campaigns, tool call interception, memory poisoning walkthroughs, and multi-agent lateral movement. If you want to know what an attacker does after they get a foothold in an agentic pipeline, this is where to look.

• Prompt Injection Testing in CI: Building a Regression Suite for Agents — Assert on tool calls, not on wording. Build a prompt injection regression suite with canary fixtures, sampling gates and a tiered pipeline, then learn what a green build cannot tell you.
• AI Red Teaming for Agents: Scope, Rules of Engagement and Reporting — A bypass rate says nothing about what an agent could do with its tools. Scope the exercise by authority, write the rules first, and report findings engineers can fix.
• The npm Worm That Harvested Developer Secrets: Five Controls for Coding Agent Teams — A registry worm turned one stolen publishing token into hundreds of compromised packages. Coding agents run installs with a developer's credentials, which makes the response worth copying.
• EchoLeak and the Zero-Click Lesson for Every AI Agent Owner — Aim Labs showed that an assistant can leak internal data without anyone clicking. Here is the EchoLeak mechanism at defender level, and the controls that cut the chain.
• AISLE Found 12 Zero-Days in OpenSSL. FENRIR Found 100+ More. What AI-Discovered Vulnerabilities Mean for Defenders — AI-discovered zero-days from AISLE and FENRIR are not a new threat category - they are a volume problem your triage process must handle without panic or shortcuts.
• Rob T. Lee Gave Claude Code Root on a DFIR Workstation - Here's What SANS Learned — Rob T. Lee gave Claude Code root on a SIFT workstation at [un]prompted - and what SANS learned exposes the core misconception behind agentic security in DFIR environments.
• How to Red-Team an Agentic System: A Practitioner's Methodology — A practitioner's methodology for red-teaming agentic systems - covering tool inventory mapping, authority probing, prompt injection, and lateral movement simulation in autonomous agent environments.
• Inside LLM Security Flaws: What the Latest Vulnerability Research Means for Agentic AI Systems —
• Beyond Token Revocation: How VS Code Extensions Can Plant Persistent GitHub Backdoors —
• How Agentic AI Is Rewriting the Rules of State-Sponsored Cyber Espionage —
• Red Teaming Tool Calls: Techniques for AI Agent Pentests —
• How Attackers Hijack Tool Calls in AI Agent Pipelines —
• Multi-Agent Lateral Movement: Red-Team Techniques and Detection — Multi-agent lateral movement turns a single compromised agent into full pipeline access. Here are the red-team techniques attackers use — credential harvesting, tool registry poisoning, prompt injection across boundaries — and what detection actually looks like in practice.
• Jailbreaking vs. Prompt Injection: Why Getting the Definitions Right Matters for AI Security — Confusing jailbreaking with prompt injection leads teams to build defenses in the wrong layer - here is how to distinguish them and what to do about each.