About
Michał Kosiorek
Founder · Security researcher
I founded ArkLink to work on the boundary that moved: AI agents that read untrusted content and act on it with real credentials. The work runs from agent and MCP security down to kernel memory safety, and every claim on this site links to the record it came from.
A/01Track record - verified
01Wrote and upstreamed the fix for CVE-2026-46116, a use-after-free in the IPsec state code, now in mainline and seven stable branches.02Credited by Apple for CVE-2026-43822 and CVE-2026-43739 in the kernel of iOS, macOS, watchOS, tvOS and visionOS 26.6.03Author of an open-source honeypot for MCP-native AI agents: one Rust binary, seven detectors mapped to MITRE ATT&CK and ATLAS, STIX 2.1 export.04Ported Project Zero's SockFuzzer to Apple Silicon.05Two paid reports in OpenAI's program on Bugcrowd; eight reports across four programs on HackerOne.06One evidence-led post a week on AI agent and MCP security, each separating what is confirmed from what is not known.