Knowledge

Memory security, explained from the ground up.

Persistent Memory Files make agents powerful — and vulnerable. These articles explain how the attack works and how you defuse it.

Attack vector

Skills as the entry point

How ClawHub & Co. become a supply chain — one command, third-party instructions running with full privileges inside your agent's memory.

Incident

ClawHavoc: 1,184 poisoned skills

The real ClawHub supply-chain attack — typosquatting, disguised malware, credential theft. And what it teaches us about marketplaces.

Attack

Claude, MCP & tool poisoning

When the tool description itself is the attack: MCP, prompt injection and the supply chain in Claude Code.

CI/CD

Poisoned Pipeline Execution

How attackers hijack CI/CD — without changing a single line of app code. OWASP CICD-SEC-4, Megalodon, TanStack.

Supply Chain

Supply-chain worms

Shai-Hulud, Miasma & co.: self-propagating malware that hijacks runners and harvests secrets.

Synthesis

AI agents in the CI/CD pipeline

Autonomous agents in pipelines create a new persistence layer — if their memory gets poisoned.

Fundamentals

What is memory poisoning?

How an agent's persistent Memory Files become an entry point — and which defense actually holds up.

Attack

Prompt injection explained

The path from a harmless web page to a permanent instruction in your agent's Memory Files — step by step.

Design

Why fail-closed wins

The principle behind PoisonZero: block when in doubt instead of waving through — and why “fail-open” is dangerous for autonomous agents.

Ready to protect your Memory Files?

PoisonZero is free. Create an app in the panel and protect your first files in under a minute.

Try 14 days free