Home

Blog

THE AIDR BRIEF

Agentic AI Security Research & Analysis

Research, intelligence, and field notes from the Manifold team.

RESEARCH

What to think about curl | bash now that AI agents run it.

Aug 19, 2026

Ax Sharma

Head of Research

Cody Nash

Researcher

RESEARCH

What to think about curl | bash now that AI agents run it.

Aug 19, 2026

Ax Sharma

Head of Research

Cody Nash

Researcher

RESEARCH

What to think about curl | bash now that AI agents run it.

Aug 19, 2026

Ax Sharma

Head of Research

Cody Nash

Researcher

ALL

RESEARCH

NEWS

PRODUCT

THOUGHT LEADERSHIP

ALL

RESEARCH

NEWS

PRODUCT

THOUGHT LEADERSHIP

RESEARCH

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Aug 10, 2026

Francisco Rosales

Offensive Security Engineer

RESEARCH

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Aug 10, 2026

Francisco Rosales

Offensive Security Engineer

RESEARCH

When a conversation wanders, do an agent's guardrails slip?

Aug 5, 2026

Cody Nash

Researcher

RESEARCH

When a conversation wanders, do an agent's guardrails slip?

Aug 5, 2026

Cody Nash

Researcher

RESEARCH

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

Aug 4, 2026

Ax Sharma

Head of Research

Cody Nash

Researcher

RESEARCH

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

Aug 4, 2026

Ax Sharma

Head of Research

Cody Nash

Researcher

THOUGHT LEADERSHIP

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

Jul 31, 2026

Nate Demuth

Chief Architect

THOUGHT LEADERSHIP

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

Jul 31, 2026

Nate Demuth

Chief Architect

VULNERABILITY RESEARCH

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Jul 30, 2026

Francisco Rosales

Offensive Security Engineer

VULNERABILITY RESEARCH

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Jul 30, 2026

Francisco Rosales

Offensive Security Engineer

THOUGHT LEADERSHIP

Lethal Trifecta Noise: Why it fits every agent you deploy

Jul 29, 2026

Nate Demuth

Chief Architect

THOUGHT LEADERSHIP

Lethal Trifecta Noise: Why it fits every agent you deploy

Jul 29, 2026

Nate Demuth

Chief Architect

VULNERABILITY RESEARCH

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

Jul 27, 2026

Francisco Rosales

Offensive Security Engineer

VULNERABILITY RESEARCH

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

Jul 27, 2026

Francisco Rosales

Offensive Security Engineer

THREAT RESEARCH

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

Jul 22, 2026

Ax Sharma

Head of Research

Cody Nash

Researcher

THREAT RESEARCH

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

Jul 22, 2026

Ax Sharma

Head of Research

Cody Nash

Researcher

RESEARCH

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

Jul 21, 2026

Francisco Rosales

Offensive Security Engineer

RESEARCH

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

Jul 21, 2026

Francisco Rosales

Offensive Security Engineer

MCP server supply chain intelligence, now in Manifest. Explore

Why Manifold

Platform

Company

Resources

Manifest

Book a demo

MCP server supply chain intelligence, now in Manifest. Explore

SEE MANIFOLD IN ACTION

Book a demo

SEE MANIFOLD
IN ACTION

Book a demo

SEE MANIFOLD IN ACTION

Book a demo

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

THE AIDR BRIEF

Agentic AI Security Research & Analysis

What to think about curl | bash now that AI agents run it.

What to think about curl | bash now that AI agents run it.

What to think about curl | bash now that AI agents run it.

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

When a conversation wanders, do an agent's guardrails slip?

When a conversation wanders, do an agent's guardrails slip?

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Lethal Trifecta Noise: Why it fits every agent you deploy

Lethal Trifecta Noise: Why it fits every agent you deploy

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft's Azure DevOps MCP Server

SEE MANIFOLD IN ACTION

SEE MANIFOLDIN ACTION

SEE MANIFOLD IN ACTION

SEE MANIFOLD
IN ACTION