David Fiser
26 articles
-
ResearchOpenClaw Security Analysis: The Unseen Risks of Agentic AI
We examine how OpenClaw’s exposed deployments, plaintext credential storage, prompt injection risks, unguarded MCP integrations, and malicious third-party skills amplify the security risks of agentic AI at enterprise scale.
September 21st, 2026David Fiser, Alfredo Oliveira
Read article -
BlogHow TrendAI™ Research Helped Close an Open Redirect in Dify's Post-Login Flow
TrendAI™ Research uncovered an open redirect in Dify's post-login flow that could have handed a freshly authenticated session, token and all, to an attacker, and worked with the vendor to close it across every sign-in path before the details went public.
August 4th, 2026David Fiser, Alfredo Oliveira
Read article -
ResearchStars Don’t Save You: Popularity Is Not Security in the MCP Ecosystem
Building on our previous research, we correlated the security issues identified in public MCP servers with metadata crawled from popular directories. We then analyzed whether indicators such as popularity, activity, and vetting serve as reliable metrics to infer the risk of adopting an MCP server.
June 24th, 2026Vincenzo Ciancaglini, Marco Balduzzi, Alfredo Oliveira , David Fiser
Read article -
ResearchHunt Them All: An AI-Powered Vulnerability Sweep of 19,000 MCP Servers
In this research, we analyzed over 19,000 open-source MCP server repositories to uncover how much AI-generated code they contain and how many harbor exploitable vulnerabilities.
May 27th, 2026Alfredo Oliveira , David Fiser
Read article -
ResearchUpdate on Exposed MCP Servers: The Threat Widens to the Cloud
Exposed Model Context Protocol (MCP) servers have become powerful vectors for cloud attacks, enabling threat actors to not only access sensitive data but also take control of the cloud services themselves.
April 28th, 2026Alfredo Oliveira , David Fiser
Read article -
BlogMalicious OpenClaw Skills Used to Distribute Atomic macOS Stealer
Malicious OpenClaw skills trick AI agents and users into installing a new AMOS variant that steals extensive data at scale.
February 23rd, 2026 8 minAlfredo Oliveira , Buddy Tancio, David Fiser, Philippe Lin…
Read article -
ResearchUsing Containers to Secure Your MCP Infrastructure
Security risks to MCP servers can be mitigated by running them within containers. This report discusses these security risks and how MCP containerization can implement least privilege in practice.
September 17th, 2025 14 minAlfredo Oliveira , David Fiser
Read article -
ResearchBeware of MCP Hardcoded Credentials: A Perfect Target for Threat Actors
Poor secret management in MCP servers can lead to serious consequences, including data breaches and supply chain attacks. This article examines the reality of these unsecure configurations and offers practical recommendations that minimize the chances of exposure.
August 13th, 2025 7 minAlfredo Oliveira , David Fiser
Read article -
ResearchMCP Security: Network-Exposed Servers Are Backdoors to Your Private Data
Exposed MCP servers pose a risk for organizations utilizing them. Our research examined the types of concerns that emerge and how to keep systems safe through immediate and extended measures.
July 16th, 2025Alfredo Oliveira , David Fiser
Read article -
ResearchFrom Registries to Private Networks: Threat Scenarios Putting Organizations in Jeopardy
Stolen certificates and private keys could be weaponized by cybercriminals to penetrate a company’s system. Our research investigates how these scenarios would play out, how they affect the organizations, and how to prevent such attacks.
April 2nd, 2025 13 minAlfredo Oliveira , David Fiser
Read article -
ResearchSilent Sabotage: Weaponizing AI Models in Exposed Containers
How can misconfigurations help threat actors abuse AI to launch hard-to-detect attacks with massive impact? We reveal how AI models stored in exposed container registries could be tampered with— and how organizations can protect their systems.
December 4th, 2024 14 minAlfredo Oliveira , David Fiser
Read article -
ResearchAPI Security Exposed: The Role of API Vulnerabilities in Real-World Data Breaches
Our research highlights the problems faced by organizations with regard to API vulnerabilities and offers actionable solutions and practical steps to secure API systems.
October 10th, 2024 2 minAlfredo Oliveria, David Fiser
Read article -
ResearchKong API Gateway Misconfigurations: An API Gateway Security Case Study
Tools that aggregate access into multiple different environments, such as API gateways, pose a security risk for all these environments upon breach. In this article, we continue our journey through the security issues of the API Gateway landscape. Our new research focuses on another popular API gateway — Kong.
May 21st, 2024 11 minAlfredo Oliveira , David Fiser
Read article -
ResearchYou Can't See Me: Achieving Stealthy Persistence in Azure Machine Learning
In the latest installment of our ongoing series where we identify and investigate security flaws in Azure Machine Learning (AML), we explore how cybercriminals could manage to covertly gain persistence in AML workspaces.
April 22nd, 2024 12 minNitesh Surana, David Fiser
Read article -
ResearchBuilding Resilience: 2024 Security Predictions for the Cloud
We delve into the multifaceted nature of cloud cyberthreats in 2024, from the stealthy dangers of data poisoning in machine learning models to the complexities of securing APIs, and more.
February 8th, 2024 12 minAlfredo Oliveira , David Fiser, Nitesh Surana, Magno Oliveira…
Read article -
ResearchThreat Modeling API Gateways: A New Target for Threat Actors?
In this article, we dive into API gateway functions and risks, the advantages of API gateways in hybrid and multi-cloud environments, and common API security risks and best practices.
December 14th, 2023 7 minDavid Fiser, Alfredo Oliveira
Read article -
ResearchMining Through Mountains of Information and Risk: Containers and Exposed Container Registries
In this entry, we continue delving into an investigation of exposed registries and look at the types of files and information that malicious actors can access and compromise from these.
October 9th, 2023 21 minAlfredo Oliveira , David Fiser
Read article -
ResearchExposed Container Registries: A Potential Vector for Supply-Chain Attacks
In this entry, we will discuss publicly exposed registries, which are repositories or databases containing information accessible to the public without the need for authentication.
September 26th, 2023 12 minAlfredo Oliveira , David Fiser
Read article -
ResearchExploring Potential Security Challenges in Microsoft Azure
Our research identifies sensitive environmental variables in the Microsoft Azure environment that, when leaked, can be used by malicious actors to compromise the entire serverless environment.
March 29th, 2023 5 minDavid Fiser, Alfredo Oliveira
Read article -
ResearchAnalyzing the Risks of Using Environment Variables for Serverless Management
We examined the potential risks associated with using the serverless environment service for secrets management.
July 14th, 2022 5 minDavid Fiser
Read article - Research
An Analysis of Azure Managed Identities Within Serverless Environments
We examine Azure’s Managed Identities service and its security capability in a threat model as developers’ go-to feature for managing secrets and credentials.
June 14th, 2022 5 minDavid Fiser
Read article -
ResearchUsing Custom Containers in Serverless Environments for Better Security
After looking at offerings by cloud service providers (CSPs), we examined the possibilities of using a more secure serverless environment by running a custom container.
May 12th, 2022 6 minDavid Fiser, Alfredo Oliveira
Read article -
ResearchCrafting an Azure App Services Threat Model
We looked into Azure App Services and created a threat model to mitigate the impact of threats on the infrastructure and applications.
May 4th, 2022 8 minDavid Fiser
Read article -
ResearchAnalyzing the Risks of Using Environmental Variables for Managing Serverless Environments
We examined the potential risks associated with using the serverless environment service for secrets management.
January 14th, 2022 5 minDavid Fiser
Read article - Research
Identifying Weak Parts of a Supply Chain
Malicious attacks have consistently been launched on weak points in the supply chain. Like all attacks, these will evolve into more advanced forms. Software development, with multiple phases that could be placed at risk, is particularly vulnerable.
March 3rd, 2021 6 minDavid Fiser
Read article -
ResearchInfrastructure as Code: Security Risks and How to Avoid Them
Infrastructure as Code (IaC) is a key DevOps practice that bolsters agile software development. In this report, we identify security risk areas in IaC implementations and the best practices in securing them in hybrid cloud environments.
July 14th, 2020 8 minDavid Fiser
Read article