Article

SkillSecurer: Detecting and Patching Prompt-Injection Vulnerabilities in AI Agent Skills

Agent skills extend AI agents with reusable instructions, scripts, and configuration, but are also open to new attacks to influence an agent's decisions and actions. To address …

donato-mecca

Lost in Permissions: Exploring the Microsoft 365 App Ecosystem

The Microsoft 365 (M365) ecosystem hosts thousands of third-party applications that integrate with enterprise tenants via fine-grained OAuth permissions, potentially granting …

vincenzo-longo

Learning to Link: Automatic Re-identification of BLE Devices Under MAC Address Randomisation

Bluetooth Low Energy (BLE) employs MAC address randomisation – via Resolvable Private Address (RPA) – to mitigate long-term de- vice tracking on public advertising channels. …

reem-alghamdi