All I Want for Christmas is Your Secrets: LangGrinch hits LangChain Core (CVE-2025-68664)
Cyata Research: LangGrinch Vulnerability in LangChain Yesterday, LangChain published a critical advisory for a vulnerability…
Insights on security, identity, and innovation
All insights
Exploiting a full chain of trust flaws: how we went from unauthenticated to arbitrary remote code execution (RCE) in CyberArk Conjur
Introduction Enterprise vaults are designed to secure the secrets, credentials, and tokens that control access…
How to avoid the dangers of a vulnerable enterprise vault
It all starts with secrets – API keys, passwords, and credentials that serve as the…
The hidden weaknesses, critical gaps, and costly risks in enterprise vaults
Welcome to the second installment in our three-part blog series about enterprise vaults – what…
Securing the Keys to Your Kingdom: Why Enterprise Vaults Are So Important
Imagine coming into the office one day to find that a developer has accidentally leaked…
Why we started Cyata
There’s a silent revolution underway. AI isn’t just augmenting human labor – it’s actively replacing…
Whispering Secrets Loudly – Patch, Meet Bypass
A sequel to our MCP security deep-dive TL;DR Anthropic’s new “.dxt” extensions encrypt secrets using “sensitive”: true Secrets…
The Many Faces of Agentic Identities
AI agents are everywhere now. They’re answering customer questions, filing support tickets, updating databases, and…
The MCP Server That Smashed My Stack
AI tools aren’t just a novelty anymore – they’re woven into the fabric of modern…
Whispering Secrets Loudly: Inside MCP’s Quiet Crisis of Credential Exposure
As AI frameworks and protocols evolve at breakneck speed, security considerations often lag behind innovation….