I just published A GeoServer Zero-Day That Went From Private Report to Public Exploit infosecwriteups.com/a-geoser…

Found this GeoServer/GeoTools SQLi (CVE-2026-76904) with AgentGG, reported it privately July 3. Weeks later someone else disclosed it and it was exploited in the wild within hours, 1,500+ instances exposed. Run AgentGG on your code before you ship.

I just published AgentGG Found 100+ Zero-Days in Open Source Software infosecwriteups.com/agentgg-…

Thank you Insha Jabeen for making a video on AgentGG. youtube.com/watch?v=uzfrxemt…

Thank you Cyber Security News for covering my research on the five OpenClaw zero-days. All five were found with the agentgg CLI, which runs autonomous agents to find vulnerabilities at scale. Point it at your own codebase today. Writeup: cybersecuritynews.com/five-o…

Fed OpenClaw's past CVEs into an agent-creation flow. Got back 12 custom SAST agents. Ran them once. Found 5 zero-days across Slack, Discord, Matrix, Zalo, and Microsoft Teams channel extensions. Writeup: infosecwriteups.com/one-agen…

Just open sourced agentgg. It's an agentic SAST scanner. Agents reason about your code instead of pattern matching, so they catch what regex can't. Found 5 zero-days in openclaw in one scan. github.com/agentgg-dev/agent…