White Papers

May 6, 2026 White Paper

Repo-Injection: When Your AI Code Reviewer Gets Hacked

Developers rely on AI to review third-party code before it reaches production. Repo-Injection shows how that workflow can be manipulated, allowing a malicious package to both execute and influence the outcome of its own review.

Apr 24, 2026 White Paper

Keys to the Kingdom

Findability precedes targetability. Chris Wingfield examines how threat actors exploit the unprotected ecosystem around a principal, and what it takes to extend meaningful friction beyond the target.

Mar 25, 2026 White Paper

The Security Leader’s Playbook for Getting to Yes

Security leaders present technically sound risks that are acknowledged, discussed, and deferred across planning cycles. Not because the threat is unclear, but because it is framed in terms of exposure rather than consequence. Executives do not act on risk alone. They act on what that risk means for continuity, revenue, and enterprise value. When that translation is missing, alignment stalls. When it is clear, action follows.

Feb 16, 2026 White Paper

The Discoverability Problem: How AI Collapsed Practical Obscurity

Investigators found a spiral notebook in a killer's SUV containing the addresses of 45 officials and a handwritten list of data broker websites with pricing notes. No tradecraft, no expertise, just websites anyone can access. He found and correlated every target by hand. AI does it in a prompt.