OPSWAT Unit 515 research
More research
All researchWhen an AI agent trusts the tool description more than the user
Agents read tool descriptions as instructions. We show how a poisoned description in a shared tool server steers an agent, and how to review tools before you connect them.When a USB stick types faster than you do
A device that enumerates as a keyboard needs no exploit and no driver bug. We walk through how keystroke injection works, rebuild it on a lab bench, and show which controls actually stop it.
Browse by research area
All researchResearch Acknowledgments
Recognition for contributions to vulnerability research and responsible disclosure across the cybersecurity industry.
- Cisco
- Grafana Labs
- Python
- Mitsubishi Electric
- Schneider Electric
Delta Electronics





