The AIDR Brief
Agentic AI Security Research & Analysis
Research, intelligence, and field notes from the Manifold team.

Research
Coding Agents Hijacked by a Git Call
Sep 1, 2026
Francisco RosalesOffensive Security Engineer

Research
The Chain-of-Thought Police
Aug 28, 2026
Cody NashResearcher

Research
What to think about curl | bash now that AI agents run it.
Aug 19, 2026
Ax SharmaHead of Research
Cody NashResearcher

Research
Cursor CLI ran untrusted repo code
Aug 10, 2026
Francisco RosalesOffensive Security Engineer

Research
The Risk Is Dwell, Not Drift
Aug 5, 2026
Cody NashResearcher

Research
77 evil twin Open VSX extensions
Aug 4, 2026
Ax SharmaHead of Research
Cody NashResearcher

Thought Leadership
Rogue Agent Disclosures
Jul 31, 2026
Nate DemuthChief Architect

Research
PewDiePie's Odysseus Had a Critical RCE
Jul 30, 2026
Francisco RosalesOffensive Security Engineer

Thought Leadership
Intent Drift Noise
Jul 29, 2026
Nate DemuthChief Architect

Research
The "Restricted" Deployment That Wasn't
Jul 27, 2026
Francisco RosalesOffensive Security Engineer

Research
The Counterfeit Markdown Extension
Jul 22, 2026
Ax SharmaHead of Research
Cody NashResearcher

Research
A Confused Deputy in Azure DevOps MCP
Jul 21, 2026
Francisco RosalesOffensive Security Engineer

Thought Leadership
Intent Drift Noise
Jul 16, 2026
Nate DemuthChief Architect

Research
ClaudeBleed Reopened
Jul 14, 2026
Ax SharmaHead of Research

Research
Scope Squatting on ClawHub
Jun 19, 2026
Ax SharmaHead of Research

Research
Bypassing Cline's Safety Checks
Jun 17, 2026
Ax SharmaHead of Research

Thought Leadership
Prompt Injection Debate
Jun 11, 2026
Ax SharmaHead of Research

Thought Leadership
The AI Insider Threat in Your Stack
Jun 5, 2026
Oleksandr YaremchukCTO & Co-Founder

Research
Critical IDOR in n8n-mcp
Jun 4, 2026
Ax SharmaHead of Research
Francisco RosalesOffensive Security Engineer

Thought Leadership
AI Agent Village Disasters
Jun 1, 2026
Neal SwaelensCEO & Co-Founder

Research
mcp-server-kubernetes Read-Only Bypass
May 18, 2026
Ax SharmaHead of Research
Francisco RosalesOffensive Security Engineer

Research
40% False Positive Rate in Skill Scanning
May 14, 2026
Ax SharmaHead of Research

Product
Manifest Adds MCP Servers
May 12, 2026
Oleksandr YaremchukCTO & Co-Founder
Neal SwaelensCEO & Co-Founder

Research
ClawHub Crypto Swarm Skills
Apr 28, 2026
Ax SharmaHead of Research

Research
Skill Supply Chain Risk
Apr 22, 2026
Ax SharmaHead of Research

Research
Gateway Gap
Apr 16, 2026
Oleksandr YaremchukCTO & Co-Founder
Nate DemuthChief Architect

Research
Git Spoofing
Apr 15, 2026
Ax SharmaHead of Research
Oleksandr YaremchukCTO & Co-Founder

Product
Introducing Manifest
Apr 14, 2026
Oleksandr YaremchukCTO & Co-Founder
Neal SwaelensCEO & Co-Founder

Research
Non-Adversarial Agent Harm
Apr 12, 2026
Neal SwaelensCEO & Co-Founder

Research
EDR’s Blind Spot for Agents
Apr 7, 2026
Nate DemuthChief Architect
Neal SwaelensCEO & Co-Founder

Research
Classifiers Fallacy
Mar 31, 2026
Neal SwaelensCEO & Co-Founder
Oleksandr YaremchukCTO & Co-Founder

News
Seed Press Release
Mar 18, 2026
Manifold TeamThe Team

Research
The Sandboxing Illusion
Mar 18, 2026
Neal SwaelensCEO & Co-Founder
Oleksandr YaremchukCTO & Co-Founder


