About the author

Yotam Perkal leads Security Research at Pluto Security, where he focuses on securing AI-native development environments and uncovering emerging risks in AI-driven software workflows. With over a decade of experience in cybersecurity, his work sits at the intersection of offensive research, vulnerability management, and software supply chain security.

Previously, Yotam led Threat Research at Zscaler, headed Vulnerability Research at Rezilion, and held multiple roles within the PayPal security organization.

He is an active contributor to cross-industry initiatives focused on AI security, vulnerability management, and software supply chain risk.

Related Posts

Introducing CopilotSec: A Community Knowledge Hub for Security of The Microsoft AI Ecosystem

The Microsoft AI ecosystem has expanded faster than the practical security guidance around it. Copilot Studio gives any citizen developer a citizen-grade path from idea…

Securing Copilot Studio: A Practical Hardening Guide

Copilot Studio has gone from “we’re experimenting” to “we have agents in production” in a lot of organizations – and the security work hasn’t kept…

Inside Copilot Studio: How Microsoft’s Citizen-Developer Agent Platform Actually Works

Microsoft Copilot Studio is the citizen-developer end of the Microsoft AI ecosystem. A maker without writing code can compose an agent in an afternoon: pick…

Enterprise Agent Governance

Enterprise Agent Governance: Monitoring AI Coding Agents Without Stifling Productivity The continued rise of AI coding agent tools such as Claude Code, Devin, and Cursor…

Skills, Connectors, Plugins, Oh My: A Security Practitioner’s Map of the Claude Extension Ecosystem

TL;DR Three primitives, one trust radius. Skills, Connectors (MCP), and Plugins look like distinct architectural units but are effectively a bundle. A single plugin installation…

Agent Skills Supply Chain Risks

Supply Chain Risks of Agent Skills AI agents are rapidly evolving from simple automation tools into complex systems capable of performing a wide range of…

Inside Claude Managed Agents: Reverse-Engineering the Security Boundaries of Anthropic’s Hosted Agent Runtime

In our previous deep dive into Claude Cowork, we reverse-engineered Anthropic’s desktop agent – uncovering gVisor syscall filtering, MITM TLS inspection proxies, and a layered…

Software Supply Chain Attack: How the AI Agent Ecosystem Became a New Battleground

The software ecosystem has undergone a fundamental shift with the emergence of AI agents. Applications are no longer built from isolated codebases. They are now…

Securing Claude Managed Agents: What You Need to Know Before Going to Production

Claude Managed Agents is Anthropic’s hosted agent runtime – a platform where Claude runs autonomously in cloud containers with bash access, file I/O, web browsing,…