Research Resources

July 23, 2026
MCP Configuration Poisoning: Owning Your Machine With Just A Text File
Attackers can weaponize your AI agent tooling just by sneaking a text file into the right place on your system, putting developers and other users at risk.…

August 18, 2026
npm v12 Lifecycle Script Limits: A Real Malicious Package Risk Reduction, or Just Moving Risk Around?
The new npm client v12 introduced new defaults that refuse to run preinstall and other lifecycle scripts when installing. But did this make a meaningful…

June 11, 2026
Proof, Not Promises: How We Drive Security Testing Accuracy With Better Data 
Claims of security testing accuracy are often the result of inexpensive testing methods that produce results intended to tell a marketing story. But when you…