MAL-2025-41575 Malicious code in intel-ai-assistant-ai (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cloud-native-ai-pipeline (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41542 Malicious code in cloud-native-ai-pipeline (npm)

--- -= Per source details. Do not edit below this line.=-...

Microsoft ranked number one in modern endpoint security market share third year in a row

Amidst the backdrop of a surging number of ransomware campaigns worldwide, organizations have increasingly chosen Microsoft Defender’s endpoint security as their preferred solution. It’s engineered to disrupt cyberattacks and not business continuity. As a result, for a third year a row, Microsoft...

Linux Distros Unpatched Vulnerability : CVE-2019-25104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the function AICastScriptLoad of the file...

Securing and governing the rise of autonomous agents​​

In this blog, you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer CISO for Identity, Igor Sakhnov, about how to secure and govern autonomous agents. This blog is part of a new ongoing series where our Deputy CISOs share their thoughts on what is most...

IBM Concert Software Data Exposure Overload Vulnerability

IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software suffers from an excessive data exposure vulnerability that...

XGrammar 安全漏洞

XGrammar is a fast, flexible and portable structured generation tool from mlc-ai open source. A security vulnerability exists in XGrammar versions prior to 0.1.21, which stems from an infinite recursion problem in the syntax...

Malicious code in cld-ai-chatbot-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47807a9125d00d52f4b02cf9742fdd7efd42b3b9cc93d5091594127fa5c9771c Any computer that has this package installed or running should be considered...

MAL-2025-41375 Malicious code in cld-ai-chatbot-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47807a9125d00d52f4b02cf9742fdd7efd42b3b9cc93d5091594127fa5c9771c Any computer that has this package installed or running should be considered...

Malicious code in azure-ai-foundry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6397746f8f17f740ba33999b71f8e214096f472aaa54614d8603deeb72435c8 The OpenSSF Package Analysis project identified 'azure-ai-foundry' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

WordPress Ai Image Alt Text Generator for WP Plugin <= 1.1.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao BlueRock in WordPress Plugin Ai Image Alt Text Generator for WP versions = 1.1.5...

CVE-2025-47700 AI plugin APIs can be triggered using post actions

Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...

May 13, 2025—KB5058411 (OS Build 26100.4061) for Windows

None None...

Malicious code in ai-agent-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c9d8af77a711b63ca783f6e56fa2838866df6eb7feee32485fa94cb387c202 The OpenSSF Package Analysis project identified 'ai-agent-email' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41255 Malicious code in ai-agent-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c9d8af77a711b63ca783f6e56fa2838866df6eb7feee32485fa94cb387c202 The OpenSSF Package Analysis project identified 'ai-agent-email' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

Intel AI Playground Improper Privilege Vulnerability

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

Intel AI for Enterprise Retrieval-augmented Generation Search Path Uncontrolled Vulnerability

Intel AI for Enterprise Retrieval-augmented Generation is a technology framework for enhancing the accuracy and relevance of Large Language Model LLM responses by incorporating an external knowledge base. An uncontrolled search path vulnerability exists in Intel AI for Enterprise...

PT-2025-33889

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.138 Description An out-of-bounds write issue exists in the V8 JavaScript engine. This flaw allows a remote attacker to potentially exploit heap corruption—a condition where memory allocated in the hea...

CIA+TA Risk Assessment for AI Reasoning Vulnerabilities

As AI systems increasingly influence critical decisions, they face threats that exploit reasoning mechanisms rather than technical infrastructure. We present a framework for cognitive cybersecurity, a systematic protection of AI reasoning processes from adversarial manipulation. Our contributions...