Context Bombs: Stopping AI Attackers in Their Tracks

AI agents can now run complex cyberattacks on their own, escalating from a foothold to full cloud admin within minutes. In previous research, Tracebit benchmarked frontier AI models inside a controlled AWS cyber range and showed that canaries reliably detect these autonomous attackers. This follow-up study asks whether a canary can do more than warn a defender: whether it can stop an attack outright. The approach is a context bomb, a short string hidden in a canary that trips an AI agent's own safety guardrails and halts it before it can do damage, while still raising an alert.

Across 152 attack runs against five leading models, planting a single context bomb in a decoy secret cut agent success by roughly 90%. The most capable agent tested, Opus 4.8, went from reaching admin in 93% of runs to 0% once a context bomb was in play, and no run completed an attack path without first tripping a canary.

In this session, Tracebit's Alessandro Brucato (Security Researcher) and Sam Cox (Co-founder & CTO), moderated by Gadi Evron (CEO and Founder, Knostic), walk through the research and take audience questions.

What you'll take away:

Who should attend:

• Security leaders preparing their detection strategy for offensive AI agents
• Security engineers and architects building detection and deception programs
• Detection and response teams focused on high-fidelity signal and early warning
• Cloud security teams responsible for AWS, GCP, and Azure environments