We found a 1-click RCE in Block's Goose AI agent - any website could silently execute commands on your machine.
We spun out of the #1 hacking team in the US and raised a $3.2M seed to make getting hacked a thing of the past.
How Missing Index Checks Allows Full Proof Forgery
How MCP Authentication Flaws Enable RCE in Claude Code, Gemini CLI, and More
