PT-2026-88192

These are all security issues fixed in the google-guest-agent-20260903.00-1.1 package on the GA media of openSUSE Tumbleweed...

Staying on the Attack Path: Structured State for Long-Horizon Automated Penetration Testing

Large language model LLM based agents are increasingly applied to cybersecurity tasks such as vulnerability discovery and automated penetration testing. On long-horizon security tasks, however, such agents remain limited by context forgetting and intent drift: early critical facts and causal...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to an uncontrolled element of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the user remote access agent for corporate resources and Prisma Access applications lies in the violation of data protection mechanisms, allowing attackers to bypass unauthorized access protections.

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security measures against unauthorized access...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an improper definition of the link before accessing a file. This allows attackers to delete system files and cause service failures.

The vulnerability of the Prisma Access Agent, a user-level remote access agent for corporate resources and applications, stems from an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow a malicious actor to delete system files and cause service...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, relates to the ability to bypass authentication through spoofing. This allows attackers to carry out spoofing attacks.

The vulnerability of the Prisma Access Agent, a user-level remote access agent, relates to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability allows attackers to carry out spoofing attacks...

PT-2026-86664

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

CVE-2026-77698: Improper Privilege Management

Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade...

OPENSUSE-SU-2026:11699-1 google-guest-agent-20260903.00-1.1 on GA media

These are all security issues fixed in the google-guest-agent-20260903.00-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in date-fns-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9839e9520db45a2a739a415767a8258e15afee65cee71fe5ff41777cbd22450 The package impersonates the popular date-fns library. Its main module, date-fns-formatter.js, contains a small formatDate shim as a decoy in front o...

MAL-2026-15974 Malicious code in date-fns-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9839e9520db45a2a739a415767a8258e15afee65cee71fe5ff41777cbd22450 The package impersonates the popular date-fns library. Its main module, date-fns-formatter.js, contains a small formatDate shim as a decoy in front o...

Skynet: Workflow-Level Anomaly Detection for Agentic AI Via Semantic and Structural Modeling

Agentic AI systems execute complex tasks through long-horizon workflows of planning, tool use, and multi-agent coordination. Task failures in these systems often originate from a single step, such as an injected prompt or a flawed plan, and are then amplified through downstream dependencies as th...

MOLE: Detecting Insider Threats in AI Agents

Model misalignment, prompt injection, or operator misuse could lead AI agents operating frontier-lab accounts to exfiltrate model weights, poison training data, or weaken release gates. Existing benchmarks do not test whether defenders can detect this activity among routine work under a limited...

AURA-Eval: Evaluation Framework for Acting under Risk Awareness in LLM Agent Trajectories

LLM agents operate in workflows where unsafe actions can have real consequences. Existing safety evaluations often reduce behavior to a single score, obscuring risk recognition, pre-action detection, and safe task completion when a safe solution exists. We introduce AURA-Eval, a framework combini...

exploitgym-unified

ExploitGym Unified Runner - 898 instâncias + Dashboard Live R...

node9-proxy v2.8.3

🛡️ node9 Access control for AI agents Your AI agents can reach Slack, GitHub, email, and your database. node9 decides what they may do with each one. Credential jail · secrets and PII · destructive git, SQL and shell held for review · MCP tool pinning · network egress allowlist · loop breaker · on...

exploitBenchSkill

OpenSec ExploitBench V8 PoC Skill An installable Pi and Agent...

firefox-devtools-mcp v0.10.2

Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...

OESA-2026-3674 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the...

OESA-2026-3673 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the...