AI Security Insights

The on-device AI security research you need.

Practical guides, threat research, and architecture insights for security teams building AI-safe organisations.

Featured

CoSnitch (CVE-2026-24301): One Click, and Copilot Reads Your Gmail and Drive

Aug 24, 2026 · 7 min

Read Article

Latest Articles

CoSnitch (CVE-2026-24301): One Click, and Copilot Reads Your Gmail and Drive

A single crafted link was enough to drain data from connected Gmail, Drive and calendar accounts. With no visible confirmation. The flaw is patched. The underlying problem for companies is not.

Shadow AI · Aug 24, 2026 · 7 min · Read →

Securing AI Coding Agents: What GhostApproval, Ghostjacking and CVE-2026-62830 Have in Common

Three security incidents in six weeks, three different vendors, one shared pattern: there is a gap between what an AI agent actually does and what a human gets to see. That gap is where attackers operate.

Agent Security · Aug 24, 2026 · 9 min · Read →

Our AI-Security Model Zoo Is Now Open Source

Threat Research · Jul 21, 2026 · 7 min · Read →

Orca-Sonar: Our Multilingual Document Classifier for AI Security

We're releasing Orca-Sonar, a fast, multilingual model (German + English) that sorts text into 7 topic classes. It's part of the Patronus Protect stack and routes incoming content by topic and sensitivity before it reaches an LLM, a DLP gate, or a storage tier.

Threat Research · Jun 12, 2026 · 8 min · Read →

When Malware Starts to Think: Why AI-Driven Worms Require a New Security Layer

A new research paper shows how AI agents can turn traditional computer worms into adaptive, self-replicating attack systems. Instead of following a fixed exploit chain, these worms can reason, use tools, learn from failed attempts, and spread across networks by using compromised compute. This shift makes AI runtime security essential, and shows why Patronus Protect is built for the next generation of AI-driven malware.

Threat Research · Jun 9, 2026 · 6 min · Read →

EU AI Act Article 15: 16 Extra Months Just Landed. Here Is What to Do With Them.

Article 15 of the EU AI Act becomes binding on August 2, 2026. Penalties hit 15M EUR. Here is what the law requires and how to check your gaps.

EU AI Act · May 21, 2026 · 12 min · Read →

How Patronus Detects AI Traffic Across WebSockets, SSE, gRPC, Protobuf and Modern Encodings

How modern AI traffic increasingly moves beyond simple JSON APIs into WebSockets, SSE, gRPC, Protobuf and binary streaming protocols, and how Patronus transparently detects and analyzes AI interactions across these transport and encoding layers while intentionally separating AI detection from semantic extraction.

Architecture · May 17, 2026 · 7 min · Read →

Agentic AI Broke Your Security Model

Your IAM was built for humans. Your DLP was built for clicks. Your audit log was built for human-pace actions. Agentic AI breaks all three. In 2026, 88% of enterprises had AI-agent incidents. Here is what changed and what real agent-aware security has to do.

Agent Security · May 9, 2026 · 11 min · Read →

Your security stack can't see Shadow AI

Your CASB sees the SaaS. Your DLP sees encrypted bytes. Your firewall sees a destination. None of them see Shadow AI: prompts pasted into ChatGPT, coding agents calling internal Jira, browser extensions reading confidential docs. Here is why the stack is blind, and what fixes it.

Shadow AI · May 6, 2026 · 9 min · Read →

MCP the new attack surface

MCP turns LLM clients into orchestrators that read Gmail, write to Jira, execute shell commands. The average dev laptop now runs three to eight MCP servers, most installed without IT approval. No traditional security tool can see them. Here is the attack surface and what fixes it.

Agent Security · Apr 22, 2026 · 8 min · Read →

New AI-Security Model: Wolf Defender

Threat Research · Apr 15, 2026 · 3 min · Read →

Cloud vs. On-Device AI Security

Most AI security tools route every prompt through the vendor's cloud to inspect it. You added a tool to reduce data exposure and ended up with two cloud companies holding your prompts instead of one. Here is what that costs and what the alternative looks like.

Architecture · Apr 2, 2026 · 8 min · Read →

Today we’re releasing our first security model: Wolf Defender

Threat Research · Mar 18, 2026 · 5 min · Read →

Patronus Protect - On-Device Protection for your AI Interactions

Architecture · Jan 18, 2026 · 7 min · Read →