Contributor

Francisco Rosales

Offensive Security Engineer

Francisco Rosales is an Offensive Security Engineer specializing in application security across web, API, mobile, and AI-powered systems. He also builds AI-native tooling that bridges offensive security with modern AI workflows.

Blogs by

Francisco Rosales

RESEARCH

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Aug 7, 2026

Francisco Rosales

Offensive Security Engineer

VULNERABILITY RESEARCH

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Jul 30, 2026

Francisco Rosales

Offensive Security Engineer

VULNERABILITY RESEARCH

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

Jul 26, 2026

Francisco Rosales

Offensive Security Engineer

RESEARCH

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

Jul 20, 2026

Francisco Rosales

Offensive Security Engineer

RESEARCH

CVE-2026-54052: A wrong number in n8n-mcp leaked your neighbor's credentials (CVSS 9.6)

Jun 4, 2026

Ax Sharma

Head of Research

Francisco Rosales

Offensive Security Engineer

RESEARCH

When "Read-Only Mode" Isn't: CVE-2026-46519 in mcp-server-kubernetes

May 18, 2026

Ax Sharma

Head of Research

Francisco Rosales

Offensive Security Engineer

Blogs by

Francisco Rosales

RESEARCH

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Aug 7, 2026

Francisco Rosales

Offensive Security Engineer

VULNERABILITY RESEARCH

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Jul 30, 2026

Francisco Rosales

Offensive Security Engineer

VULNERABILITY RESEARCH

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

Jul 26, 2026

Francisco Rosales

Offensive Security Engineer

RESEARCH

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

Jul 20, 2026

Francisco Rosales

Offensive Security Engineer

RESEARCH

CVE-2026-54052: A wrong number in n8n-mcp leaked your neighbor's credentials (CVSS 9.6)

Jun 4, 2026

Ax Sharma

Head of Research

Francisco Rosales

Offensive Security Engineer

RESEARCH

When "Read-Only Mode" Isn't: CVE-2026-46519 in mcp-server-kubernetes

May 18, 2026

Ax Sharma

Head of Research

Francisco Rosales

Offensive Security Engineer

MCP server supply chain intelligence, now in Manifest. Explore

Why Manifold

Platform

Company

Resources

Manifest

Book a demo

MCP server supply chain intelligence, now in Manifest. Explore

SEE MANIFOLD IN ACTION

Book a demo

SEE MANIFOLD
IN ACTION

Book a demo

SEE MANIFOLD IN ACTION

Book a demo

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

Francisco Rosales

Offensive Security Engineer

Blogs by

Francisco Rosales

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

CVE-2026-54052: A wrong number in n8n-mcp leaked your neighbor's credentials (CVSS 9.6)

When "Read-Only Mode" Isn't: CVE-2026-46519 in mcp-server-kubernetes

Blogs by

Francisco Rosales

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

CVE-2026-54052: A wrong number in n8n-mcp leaked your neighbor's credentials (CVSS 9.6)

When "Read-Only Mode" Isn't: CVE-2026-46519 in mcp-server-kubernetes

SEE MANIFOLD IN ACTION

SEE MANIFOLDIN ACTION

SEE MANIFOLD IN ACTION

SEE MANIFOLD
IN ACTION