The Enclave Blog

Insights on agentic security research, exploitability, and remediating what matters across cloud and code.

Nice2Meet: We Turned Teams Mobile Meetings Into a Silent Account Takeover

aug 12, 2026Yanir Tsarimi

FlagLeft: We Found A Forgotten Flag That Turned Microsoft 365 Apps Into a Silent Account Takeover Pipeline for Billions of Users

jun 2, 2026Yanir Tsarimi

MapRoot: A Tale of Two Zero-Days, Two Patches, Two Bypasses Leading to Cross-Tenant RCE on Microsoft Planetary Computer

may 28, 2026Yanir Tsarimi

NGINX Rift impact in the wild: we scanned 1,465 configs from 528 popular repos (CVE-2026-42945)

may 15, 2026Yanir Tsarimi

Vibe Coding Security Risks: The Blast Radius Still Has an Owner

may 3, 2026Enclave Team

AI Code Security: The Real Risk of AI-Generated Code Is Plausibility

may 3, 2026Enclave Team

Secure Code Review Checklist for AI-Generated Pull Requests

may 3, 2026Enclave Team

AI Code Review for AppSec Teams: Triage, Not Robot Approval

may 3, 2026Enclave Team

Application Security Automation: Fix the Handoff, Not the Alert Count

may 3, 2026Enclave Team

How We Could Watch Your Azure SRE Agent In Real Time

apr 20, 2026Yanir Tsarimi