ThinkstScapes Research Roundup - Q1 - 2026

Pushing browsers to the limit Abusing Modern Browser Features for Phishing Alexander Hurbean [Blog post] [Video] Committing CSS Crimes for fun and profit Lyra Rebane [Slides] [Blog post] [Video] Improving the Trustworthiness of Javascript on the Web Ezzudin Alkotob, Giulio Berra, Benjamin Beurdouche, Richard Hansen, Daniel Huigens, Dennis Jackson, Cory Francis Myers, and Michael Rosenberg [Slides] [Blog post] LLMs standing tall Black-hat LLMs Nicholas Carlini [Video] [Slides] On the Coming Industrialisation of Exploit Generation with LLMs Sean Heelan [Blog post] [Code] AI Security with Guarantees Ilia Shumailov [Slides] [Paper] [Video] 200 Bugs/Week/Engineer: How We Rebuilt Trail of Bits Around AI Dan Guido [Slides] [Blog post] [Video] Systematic debugging for AI agents: Introducing the AgentRx framework Shraddha Barke, Arnav Goyal, Alind Khare, and Chetan Bansal [Blog post] [Paper] [Code] LLMs taking a fall Trust Me, I Know This Function: Hijacking LLM Static Analysis using Bias Shir Bernstein, David Beste, Daniel Ayzenshteyn, Lea Schönherr, and Yisroel Mirsky [Slides] [Paper] [Code] AI Agent Traps Matija Franklin, Nenad Tomašev, Julian Jacobs, Joel Z. Leibo, and Simon Osindero [Paper] Leaking secrets from the claud Niels Hofmans [Blog post] [Code] Scary Agent Skills: Hidden Unicode Instructions in Skills ...And How To Catch Them wunderwuzzi [Blog post] [Code] [Video] Nifty sundries Data Honeytokens for the Cloud Era Petrus Vasenius [Blog post] [Video] The Offense Death Cycle: Proactive Environmental Control as a Method of Persistent Cyber Defense Volodymyr Styran [Paper] The AWS Console and Terraform Security Gap Laurence Tennant [Blog post] The Limit Is the Sky… (Or Not)? Antonio Nappa [Slides] [Code] [Video] Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Google Threat Intelligence Group [Blog post]