
Ax is a security researcher and journalist with nearly a decade tracking the messy edges of modern software: supply chain attacks, malware campaigns, threat actor infrastructure, and the integrations nobody thinks to inspect until something breaks. Before joining Manifold, Ax built a public body of work analysing real-world attacks on open source ecosystems and disclosing serious flaws across major national and global organisations. His research and commentary have appeared at the BBC, Channel 5, WIRED, Fortune, TechCrunch, BleepingComputer, and others. That work shaped a clear view on where agentic risk actually lives. The scariest gaps are not the loud ones. They are the ungoverned integrations, the third-party components no one inspected, and the covert execution nobody logged. Ax joined Manifold to research exactly that surface: the runtime layer, the agentic supply chain, and the parts of enterprise infrastructure that still have no visibility.
Articles

- Thought Leadership
- Research
Four questions to ask before calling an AI agent rogue
Oct 7, 2026
Ax SharmaHead of Research

- Research
Rogue agents targeted a second Australian health dashboard, urlscan.io index shows
Sep 25, 2026
Ax SharmaHead of Research

- Research
The third-party[.]com domain is serving a ClickFix lure to Windows users
Sep 23, 2026
Ax SharmaHead of Research

- Research
What to think about curl | bash now that AI agents run it.
Aug 19, 2026
Ax SharmaHead of Research
Cody NashResearcher

- Research
77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain
Aug 4, 2026
Ax SharmaHead of Research
Cody NashResearcher

- Research
A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension
Jul 22, 2026
Ax SharmaHead of Research
Cody NashResearcher

- Research
ClaudeBleed Reopened: Browser Extensions Can Still Push Claude for Chrome to Read Your Gmail
Jul 14, 2026
Ax SharmaHead of Research

- Research
Scope Squatting: Those @openclaw and @clawhub Plugins Aren't Officially Theirs
Jun 19, 2026
Ax SharmaHead of Research

- Research
CVE-2026-52024, CVE-2026-52025: We Bypassed Two of Cline's Safety Checks to Run Code (4.2M Installs)
Jun 17, 2026
Ax SharmaHead of Research

- Thought Leadership
Is Prompt Injection a Vulnerability?
Jun 11, 2026
Ax SharmaHead of Research

- Research
CVE-2026-54052: A wrong number in n8n-mcp leaked your neighbor's credentials (CVSS 9.6)
Jun 4, 2026
Ax SharmaHead of Research
Francisco RosalesOffensive Security Engineer

- Research
When "Read-Only Mode" Isn't: CVE-2026-46519 in mcp-server-kubernetes
May 18, 2026
Ax SharmaHead of Research
Francisco RosalesOffensive Security Engineer

- Research
One AI Security Scanner Flagged 40% of Skills as Malicious. Most Were Fine.
May 14, 2026
Ax SharmaHead of Research

- Research
30 ClawHub Skills Are Quietly Recruiting Your AI Agent Into a Crypto Swarm
Apr 28, 2026
Ax SharmaHead of Research

- Research
An OpenClaw Skill With An SVG Can Steal Your Cookies
Apr 22, 2026
Ax SharmaHead of Research

- Research
Two Git Commands Fooled Claude Into Merging Malicious Code
Apr 15, 2026
Ax SharmaHead of Research
Oleksandr YaremchukCTO & Co-Founder