Home

Blog

THE AIDR BRIEF

Agentic AI Security Research & Analysis

Research, intelligence, and field notes from the Manifold team.

RESEARCH

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

Sep 1, 2026

Francisco Rosales

RESEARCH

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

Sep 1, 2026

Francisco Rosales

RESEARCH

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

Sep 1, 2026

Francisco Rosales

ALL

RESEARCH

NEWS

PRODUCT

THOUGHT LEADERSHIP

ALL

RESEARCH

NEWS

PRODUCT

THOUGHT LEADERSHIP

RESEARCH

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

Sep 1, 2026

Francisco Rosales

RESEARCH

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

Sep 1, 2026

Francisco Rosales

RESEARCH

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Aug 10, 2026

Francisco Rosales

RESEARCH

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Aug 10, 2026

Francisco Rosales

RESEARCH

When a conversation wanders, do an agent's guardrails slip?

Aug 5, 2026

Cody Nash

RESEARCH

When a conversation wanders, do an agent's guardrails slip?

Aug 5, 2026

Cody Nash

RESEARCH

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

Aug 4, 2026

Ax Sharma

Cody Nash

RESEARCH

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

Aug 4, 2026

Ax Sharma

Cody Nash

THOUGHT LEADERSHIP

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

Jul 31, 2026

Nate Demuth

THOUGHT LEADERSHIP

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

Jul 31, 2026

Nate Demuth

VULNERABILITY RESEARCH

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Jul 30, 2026

Francisco Rosales

VULNERABILITY RESEARCH

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Jul 30, 2026

Francisco Rosales

THOUGHT LEADERSHIP

Lethal Trifecta Noise: Why it fits every agent you deploy

Jul 29, 2026

Nate Demuth

THOUGHT LEADERSHIP

Lethal Trifecta Noise: Why it fits every agent you deploy

Jul 29, 2026

Nate Demuth

VULNERABILITY RESEARCH

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

Jul 27, 2026

Francisco Rosales

VULNERABILITY RESEARCH

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

Jul 27, 2026

Francisco Rosales

THREAT RESEARCH

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

Jul 22, 2026

Ax Sharma

Cody Nash

THREAT RESEARCH

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

Jul 22, 2026

Ax Sharma

Cody Nash

MCP server supply chain intelligence, now in Manifest. Explore

Why Manifold

Platform

Company

Resources

Manifest

Book a demo

MCP server supply chain intelligence, now in Manifest. Explore

SEE MANIFOLD IN ACTION

Book a demo

SEE MANIFOLD
IN ACTION

Book a demo

SEE MANIFOLD IN ACTION

Book a demo

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

Solution

Why manifold

Platform

Company

About us

Press

Career

Trust Center

Resources

Blog

Research

Manifest

Privacy

THE AIDR BRIEF

Agentic AI Security Research & Analysis

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

Cursor CLI Ran Untrusted Repository Code With the Sandbox Switched Off

When a conversation wanders, do an agent's guardrails slip?

When a conversation wanders, do an agent's guardrails slip?

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

77 "evil twin" Open VSX extensions: 19 copy private repo and CI data to a new domain

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

OpenAI and Anthropic Both Disclosed the Same Thing: The Agent Is the Threat Actor Now

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Anyone with an account could run commands on PewDiePie's AI workspace (CVSS 9.9)

Lethal Trifecta Noise: Why it fits every agent you deploy

Lethal Trifecta Noise: Why it fits every agent you deploy

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

The "Restricted" Deployment That Wasn't: Two Access-Control Bugs in community-built mcp-atlassian

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

A beaconing counterfeit extension on the VS Code Marketplace: the 'Markdown All Pro' extension

SEE MANIFOLD IN ACTION

SEE MANIFOLDIN ACTION

SEE MANIFOLD IN ACTION

SEE MANIFOLD
IN ACTION