Vulnerability research across cloud, AI coding tools and Windows — reverse engineering, exploit development and coordinated disclosure.https://eladbeber.com/https://cymulate.com/blog/openai-codex-cli-named-pipe-vulnerability/https://cymulate.com/blog/openai-codex-cli-named-pipe-vulnerability/A named-pipe local-trust vulnerability in OpenAI's Codex CLI.Wed, 01 Jul 2026 00:00:00 GMThttps://cymulate.com/blog/cve-2026-35603-ai-coding-tools-privilege-escalation/https://cymulate.com/blog/cve-2026-35603-ai-coding-tools-privilege-escalation/Privilege escalation in AI coding tools — a single writable folder compromises every user. Coordinated disclosure with CVE assignment.Wed, 17 Jun 2026 00:00:00 GMThttps://cymulate.com/blog/codex-cli-rce-prompt-injection-mitigations/https://cymulate.com/blog/codex-cli-rce-prompt-injection-mitigations/Remote code execution in OpenAI Codex CLI via prompt injection and binary hijacking on Windows.Thu, 04 Jun 2026 00:00:00 GMThttps://cymulate.com/blog/zero-click-rce-prompt-injection-ai-tools/https://cymulate.com/blog/zero-click-rce-prompt-injection-ai-tools/Zero-click remote code execution in AI tools through prompt injection.Thu, 04 Jun 2026 00:00:00 GMThttps://cymulate.com/blog/cve-2025-64669-windows-admin-center/https://cymulate.com/blog/cve-2025-64669-windows-admin-center/A local privilege escalation flaw in Windows Admin Center caused by insecure directory permissions, exploitable via extension uninstall abuse or DLL hijacking to reach SYSTEM.Wed, 06 May 2026 00:00:00 GMThttps://cymulate.com/blog/cve-2026-32196-one-click-rce-windows-admin-center/https://cymulate.com/blog/cve-2026-32196-one-click-rce-windows-admin-center/Chained Windows Admin Center vulnerabilities allowing administrator-level remote code execution from a single malicious URL click, on Azure and on-prem deployments.Wed, 06 May 2026 00:00:00 GMThttps://cymulate.com/blog/the-race-to-ship-ai-tools-left-security-behind-part-1-sandbox-escape/https://cymulate.com/blog/the-race-to-ship-ai-tools-left-security-behind-part-1-sandbox-escape/How the rush to ship AI coding tools left sandbox-escape vulnerabilities behind.Sun, 03 May 2026 00:00:00 GMThttps://cymulate.com/blog/improper-attestation-validation-windows-admin-center/https://cymulate.com/blog/improper-attestation-validation-windows-admin-center/An improper attestation signature validation flaw in Microsoft Windows Admin Center.Tue, 17 Mar 2026 00:00:00 GMThttps://cymulate.com/blog/cve-2025-547954-54795-claude-inverseprompt/https://cymulate.com/blog/cve-2025-547954-54795-claude-inverseprompt/Write-up of CVE-2025-54794 and CVE-2025-54795 in Anthropic Claude Code.Mon, 04 Aug 2025 00:00:00 GMThttps://cymulate.com/blog/cve-2025-53109-53110-escaperoute-anthropic/https://cymulate.com/blog/cve-2025-53109-53110-escaperoute-anthropic/Write-up of CVE-2025-53109 and CVE-2025-53110 in the Anthropic Filesystem MCP Server.Wed, 02 Jul 2025 00:00:00 GMThttps://cymulate.com/blog/aws-ssm-agent-plugin-id-path-traversal/https://cymulate.com/blog/aws-ssm-agent-plugin-id-path-traversal/A path traversal vulnerability in the AWS SSM Agent, patched after coordinated disclosure. Covered by The Hacker News.Tue, 08 Apr 2025 00:00:00 GMThttps://cymulate.com/blog/exploiting-pta-credential-validation-in-azure-ad/https://cymulate.com/blog/exploiting-pta-credential-validation-in-azure-ad/Azure AD / Entra ID pass-through authentication research. MSRC Hall of Fame, August 2024. Covered by Forbes and The Hacker News.Thu, 15 Aug 2024 00:00:00 GMThttps://cymulate.com/blog/cymulate-risk-google-cloud/https://cymulate.com/blog/cymulate-risk-google-cloud/A path traversal / command injection abuse path in the GCP google-guest-agent.Thu, 08 Sep 2022 00:00:00 GMT