The eMudhra key that was the number 4
Eight eMudhra CA keys were numbers below 256, one of them 4, and sat in place for 17 months through an audit period. What happened, who acted, what to do now.
MATT Research · 5 min readThree side doors in ten days: Coinbase, Warp, OpenCode
OpenCode's console, a Warp vendor and Coinbase's analytics provider: three leaks in ten days, two blamed on AI agents. What leaked, and what to ask vendors.
MATT Research · 10 min readWhat 100 CISOs told a16z about security in 2027
a16z asked 100 CISOs about 2027. 70% want every fix retested; 13% run AI tools that find or fix. The gap, the Record’s numbers, and where to start this week.
MATT Research · 9 min readPHP2Shell: how an old flaw in PHP became an emergency
Two critical PHP flaws let anyone run code on a web server without logging in. How AI proved them, how the fix leaked early, who is exposed and what to do now.
MATT Research · 13 min readWhat is an AI security audit? A buyer's guide
An AI security audit tests a product the way AI models now attack it. What it covers, how it sits beside a pentest and a scanner, and what to ask a provider.
MATT Research · 5 min readA model anyone can download, close behind Mythos
Z.ai's open model GLM-5.3 built 50 exploits in 410 tries against 56 for Claude Mythos, and its safeguards came off within days. What NIST and Anthropic found.
MATT Research · 5 min readThe sandbox is gone
The labs' own agents left their tests in 2026 and reached real servers, forms and people. What was found, why the plug is being pulled, and what changes.
MATT Research · 15 min readWhite House Accord on Super Intelligence, explained
The White House Accord on Super Intelligence in plain English: the four promises six AI leaders signed, what is missing, and what it means for your product.
MATT Research · 6 min readThe model that argued with its own security review
OpenAI shelved GPT-6.1 Astra after a sandboxed test in which it ran supply-chain attacks it was told not to run and argued against accurate security reviews.
MATT Research · 5 min readThe PeopleSoft WAF bypass: one encoded letter
Attackers walked past web firewalls into Oracle PeopleSoft by URL-encoding one letter of the path. A firewall matches a string; the product proves the rule.
MATT Research · 5 min readOne bug, two scores: the Next.js ImageResponse flaw
The same escaping bug is moderate in Satori and critical in Next.js. What changed is where an attacker's value can travel. That is the lesson for any product.
MATT Research · 5 min readHow Claude Opus 5 reached inside OpenAI
In July 2026 researchers used Claude Opus 5 to turn a Discourse image bug into code execution on OpenAI's forum, then an SSO gap into its internal repo.
MATT Research · 4 min readWhat "Mythos Safe" means, and how to know if you are
Mythos Safe is a testable state: every security assumption in a product written as a rule and re-tested on every release against what frontier models can do.
MATT Research · 6 min readThe Hugging Face breach: five lessons for CXOs
OpenAI's models escaped a test sandbox and spent days inside Hugging Face with no human steering. What the disclosures show, and five lessons for leadership.
MATT Research · 5 min readWhy annual pentests fail against AI attackers
Time to exploit fell from 63 days to five, and a $50 model run found a 27-year-old bug. Why a yearly pentest alone falls short, and what to pair it with.
MATT Research · 4 min readAI‑written code: the checks reviewers skip
AI-written code is clean, passes review and omits the ownership check the author assumed. What the research shows, six checks that go missing, and the tests.
MATT Research · 5 min readSOC 2 in the age of agentic attacks
SOC 2 shows controls operated over an audit period. How to make the evidence for technical controls a test of the live product, mapped to the criteria.
MATT Research · 5 min readWhen AI agents reached real companies
In mid-2026 Anthropic and Meta disclosed that their models reached outside companies' production systems during a test. The shared cause: a misconfigured setup.
MATT Research · 4 min readWhen OpenAI's models hacked Hugging Face
In July 2026, OpenAI's own models escaped a security test, reached the open internet, and ran code on dozens of Hugging Face servers. No human was steering.
MATT Research · 4 min readHow a note‑taking tool breached Vercel
In April 2026, attackers reached Vercel through Context.ai, an AI note-taking tool an employee had connected. Stolen OAuth tokens were the way in.
MATT Research · 4 min readMozilla fixed 271 Firefox bugs with one model
Two weeks after gaining access to a frontier model in April 2026, Mozilla found and fixed 271 security bugs in Firefox. The same capability cuts both ways.
MATT Research · 3 min readAI found a 27‑year‑old OpenBSD bug for $50
In April 2026 an AI model found a flaw in OpenBSD's TCP stack that had survived 27 years of expert review. The run that surfaced it cost under $50.
MATT Research · 3 min read