Executive Summary As traditional applications continue to embed agentic components into their workflows, the Pillar Security team continues to uncover security issues that emerge from the way th...

Executive Summary Pillar Security researchers have identified the first practical, real-world case of agent-to-agent exploitation in a multi-agent system in a real production environment, a class ...

Executive Summary I identified a CVSS 10 critical vulnerability (dubbed TrustIssues) in Google’s AI powered GitHub workflows that allowed any external attacker, with nothing more than a public Git...

Executive Summary I discovered a vulnerability in Antigravity, Google’s agentic IDE. This technique exploits insufficient input sanitization of the find_by_name tool’s Pattern parameter, allowing ...

Executive Summary I discovered a critical vulnerability in Cursor (CVE-2026-22708) that exploits how agentic IDEs handle shell built-in commands. The flaw enables sandbox bypass and remote code ex...

The guide for a freeloader Threat Intelligence Analyst and Malware Researcher Chapter Zero – Prologue Recently I saw a blog post by Trend Micro being posted in the Curated Intelligence Discord gr...

Understanding the Compound File Binary format and OLE structures to mess with CVE-2022-30190 Initially I began this research to generate weaponized RTF files delivering the CVE-2022-30190(Follina)...

Preface As part of the course we were instructed to analyze a custom malware sample developed for us, below is a full analysis of that sample plus a an automated script to extract the final payload...

Preface This week we have discussed deobfuscating initial stagers and how to unpack their executable payloads. And what I’ve decided to do, to practice this week lesson is to find actual malware o...

Preface Recently, I’ve joined @VK and @0verflows advanced malware analysis course called “Zero2Auto”. The first lesson was about algorithms in malware; compression, hashing and encryption. The firs...