Red Teaming & Offensive Research
Defending agentic systems requires understanding how they actually break—not in theory, but under deliberate, adversarial pressure. This category covers offensive techniques, red-team methodologies, and hands-on exploit research specific to autonomous agent architectures: prompt injection campaigns, tool call interception, memory poisoning walkthroughs, and multi-agent lateral movement. If you want to know what an attacker does after they get a foothold in an agentic pipeline, this is where to look.
- AISLE Found 12 Zero-Days in OpenSSL. FENRIR Found 100+ More. What AI-Discovered Vulnerabilities Mean for Defenders — AI-discovered zero-days from AISLE and FENRIR are not a new threat category - they are a volume problem your triage process must handle without panic or shortcuts.
- Rob T. Lee Gave Claude Code Root on a DFIR Workstation - Here's What SANS Learned — Rob T. Lee gave Claude Code root on a SIFT workstation at [un]prompted - and what SANS learned exposes the core misconception behind agentic security in DFIR environments.
- How to Red-Team an Agentic System: A Practitioner's Methodology — A practitioner's methodology for red-teaming agentic systems - covering tool inventory mapping, authority probing, prompt injection, and lateral movement simulation in autonomous agent environments.
- Inside LLM Security Flaws: What the Latest Vulnerability Research Means for Agentic AI Systems —
- Beyond Token Revocation: How VS Code Extensions Can Plant Persistent GitHub Backdoors —
- How Agentic AI Is Rewriting the Rules of State-Sponsored Cyber Espionage —
- Red Teaming Tool Calls: Techniques for AI Agent Pentests —
- How Attackers Hijack Tool Calls in AI Agent Pipelines —
- Multi-Agent Lateral Movement: Red-Team Techniques and Detection — Multi-agent lateral movement turns a single compromised agent into full pipeline access. Here are the red-team techniques attackers use — credential harvesting, tool registry poisoning, prompt injection across boundaries — and what detection actually looks like in practice.
- Jailbreaking vs. Prompt Injection: Why Getting the Definitions Right Matters for AI Security — Confusing jailbreaking with prompt injection leads teams to build defenses in the wrong layer - here is how to distinguish them and what to do about each.