Jul 29, 2026 · 15 min read
AWSAI
A Security Analysis of Amazon S3 Vectors and Its Use in LLM Retrieval Pipelines
Ioan Criste & Emanuel Ioniță
Resources and insights
News and research on cloud attack patterns, AI advancements, and real-world security validation.
Jul 22, 2026 · 8 min read
Hugging Face’s July 2026 Incident Shows Why Offensive Cloud Security Needs Specialized, Sovereign AI
Hugging Face’s AI-driven breach shows why hosted frontier models fail for offensive security and incident response—and why sovereign, domain-specific validation AI is required.
OFFENSAI
Jul 8, 2026 · 8 min read
OFFENSAI's Autonomous AgentO: All 122 Datadog Pathfinding Labs Solved. Here's What Made It Work.
We pointed our autonomous offensive agent, AgentO, at Datadog's new Pathfinding Labs and it solved all 122 live AWS privilege-escalation labs — no human in the loop, no access to the answers, average 9 turns. Here's what made it work.
Ioan Criste, Dragos Stanescu & Eduard Agavriloae
Jul 3, 2026 · 4 min read
OFFENSAI Joins the Wiz Integration Network (WIN)
OFFENSAI has joined the Wiz Integration Network (WIN), bringing Cloud-Native Adversarial Exposure Validation to the Wiz ecosystem so teams prove which exposures attackers can actually exploit.
Karen Nguyen
Jun 18, 2026 · 12 min read
AWS Console Sign-In Restrictions: 5 Attack Paths
AWS shipped Console Sign-In restrictions via resource control policies. Here are 5 attack paths that bypass them, and how OFFENSAI maps them.
Dragos Stanescu
May 20, 2026 · 12 min read
Attacking Production Apps Without Jailbreaking the Model: Scope Manipulation with scopeshift
scopeshift demonstrates that Claude Code and other AI coding agents can be tricked into running unauthorized pentests through network-layer deception alone — no adversarial prompts required. The agent thinks it's probing localhost, but the traffic lands on a real third-party target.
Eduard Agavriloae
Apr 28, 2026 · 7 min read
The Vulnpocalypse Isn’t Coming. It’s Already Here.
AI isn't creating a new vulnerability crisis. It's exposing the one security teams were already living in: too much noise, too little exploitability proof, and too much uncertainty.
Karen Nguyen
Ready to have more control? Explore the sandbox.
By submitting the form you are agreeing to our privacy policy.
Apr 7, 2026 · 8 min read
notyet: Open-Source Tool to Test AWS IAM Credential Revocation Gaps
AWS IAM eventual consistency gives attackers a 4-second window after credential revocation. notyet is an open-source tool to test IR containment playbooks.
Eduard Agavriloae
Feb 24, 2026 · 12 min read
AWS Incident Response: IAM Containment That Survives Eventual Consistency
Standard AWS IR containment fails against attackers exploiting IAM eventual consistency. This article presents an SCP-enforced technique that makes identity-level containment attacker-resistant.
Eduard Agavriloae
Feb 3, 2026 · 18 min read
Adversarial Exposure Validation (AEV) Guide: Prove Attack Paths
Adversarial Exposure Validation (AEV) proves what's exploitable right now, tests detection during execution, and re-runs the same path after fixes to verify closure.
OFFENSAI
Shift happens.
Be ready when it does.
Move from cloud exposure detection to controlled validation, technical evidence, and risk-based prioritization, powered by AI.
