CVE-2025-47700 AI plugin APIs can be triggered using post actions

Mattermost Server versions 10.5.x = 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows users to trick users into clicking malicious links via post actions...

May 13, 2025—KB5058411 (OS Build 26100.4061) for Windows

None None...

Malicious code in ai-agent-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c9d8af77a711b63ca783f6e56fa2838866df6eb7feee32485fa94cb387c202 The OpenSSF Package Analysis project identified 'ai-agent-email' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41255 Malicious code in ai-agent-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c9d8af77a711b63ca783f6e56fa2838866df6eb7feee32485fa94cb387c202 The OpenSSF Package Analysis project identified 'ai-agent-email' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

Intel AI Playground Improper Privilege Vulnerability

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

Intel AI for Enterprise Retrieval-augmented Generation Search Path Uncontrolled Vulnerability

Intel AI for Enterprise Retrieval-augmented Generation is a technology framework for enhancing the accuracy and relevance of Large Language Model LLM responses by incorporating an external knowledge base. An uncontrolled search path vulnerability exists in Intel AI for Enterprise...

PT-2025-33889

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.138 Description An out-of-bounds write issue exists in the V8 JavaScript engine. This flaw allows a remote attacker to potentially exploit heap corruption—a condition where memory allocated in the hea...

CIA+TA Risk Assessment for AI Reasoning Vulnerabilities

As AI systems increasingly influence critical decisions, they face threats that exploit reasoning mechanisms rather than technical infrastructure. We present a framework for cognitive cybersecurity, a systematic protection of AI reasoning processes from adversarial manipulation. Our contributions...

CVE-2025-8675 AI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095

Server-Side Request Forgery SSRF vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6...

Malicious code in @zalastax/nolb-react-ai (npm)

The package @zalastax/nolb-react-ai was found to contain malicious code...

MAL-2025-10645 Malicious code in @zalastax/nolb-ai_ (npm)

The package @zalastax/nolb-ai was found to contain malicious code...

MAL-2025-10644 Malicious code in @zalastax/nolb-ai- (npm)

The package @zalastax/nolb-ai- was found to contain malicious code...

MAL-2025-19218 Malicious code in edge-ai-tuning-kit (npm)

The package edge-ai-tuning-kit was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-13668 Malicious code in @zalastax/nolb-react-ai (npm)

The package @zalastax/nolb-react-ai was found to contain malicious code...

Malicious code in ones-ai-web (npm)

The package ones-ai-web was found to contain malicious code...

Malicious code in @zalastax/nolb-ai- (npm)

The package @zalastax/nolb-ai- was found to contain malicious code...

Malicious code in edge-ai-tuning-kit (npm)

The package edge-ai-tuning-kit was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-28239 Malicious code in ones-ai-web (npm)

The package ones-ai-web was found to contain malicious code...

Unleashing Agentic AI for Superior Threat-Informed Risk Prioritization with Agent Nyra

The cybersecurity landscape evolves relentlessly, with new adversaries and threats emerging daily. For organizations navigating these challenges, reactive responses are no longer enough. It’s about moving from complex, disconnected data streams to proactive, autonomous solutions with actionable...

A Novel Study on Intelligent Methods and Explainable AI for Dynamic Malware Analysis

Deep learning models are one of the security strategies, trained on extensive datasets, and play a critical role in detecting and responding to these threats by recognizing complex patterns in malicious code. However, the opaque nature of these models-often described as "black boxes"-makes their...