Gradient background transitioning from teal at the top to dark green at the bottom.
Blog Page
All
No items found.
News
Capsule Security Raises $7M to Prevent AI Agents from Going Rogue in Runtime: Intent is the New Perimeter
Capsule is launching a runtime security platform for the agentic AI era, built to monitor and stop autonomous agents that can bypass traditional guardrails, misuse legitimate access, and create a new class of enterprise security risk.
Naor Paz
April 15, 2026
Research
PipeLeak: The Lead That Stole Your Database - Exploiting Salesforce Agentforce With Indirect Prompt Injection
Capsule research team discover a critical prompt injection vulnerability in Salesforce Agentforce that allows attackers to exfiltrate CRM data through a simple lead from a form submission. No authentication required.
Bar Kaduri
April 15, 2026
Research
ShareLeak: Taking the Wheel of Microsoft’s Copilot Studio (CVE-2026-21520)
The Capsule research team discovered a high severity indirect prompt injection vulnerability in Microsoft Copilot Studio that enables attackers to exfiltrate sensitive data through external SharePoint form.
Bar Kaduri
April 15, 2026
Article
Why MCP Gateways are a Bad Idea (and What to Do Instead)
MCP gateways secure only one protocol and create blind spots, while runtime hooks plus approved MCP registries secure the full agent runtime where real risk lives.
Lidan Hazout
March 20, 2026
Article
ClawGuard: Open Source Security for the Agentic Era
ClawGuard was built to stop dangerous agent behavior at the intent level before execution, and NVIDIA’s NemoClaw reinforces that need by securing the runtime environment from the infrastructure side.
Lidan Hazout
March 17, 2026