Michael Stepankin

@artsploit

Agent Security Engineer at @Google

Zurich, Switzerland

Michael Stepankin
@artsploit
Aug 25, 2025
Prompt injections are a serious concern for VS Code Copilot Agent. Discover how attackers can create GitHub issues with harmful instructions and find out how to protect the coding agent effectively.
Safeguarding VS Code against prompt injections
From github.blog
1
Michael Stepankin
@artsploit
Jan 22, 2025
Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! Read it all below 🧵
7
Michael Stepankin
@artsploit
Oct 3, 2024
Hyped to speak at @ekoparty in November!
Ekoparty | Hacking everything
@ekoparty
Oct 2, 2024
Replying to @ekoparty
1
Michael Stepankin
@artsploit
Aug 21, 2024
Just submitted a CFP to @ekoparty where I want to talk about breaking Maven repository managers. This is the one of the craziest and fruitful research projects I've done in my career.
3
Michael Stepankin
@artsploit
Jul 22, 2024
Kafka UI can be a juicy target for bug hunters, here is why:
3 ways to get Remote Code Execution in Kafka UI
From github.blog
1