ai-kill-chain

面向 AI 时代威胁的扩展网络杀伤链 对 Lockheed Martin 网络杀伤链的更新，面向防御 LLM 和智能体 AI 攻击的防御者。新增一个针对模型供应链攻陷的攻击前阶段。为原有七个阶段中的每一个添加 AI 特定子技术。将“目标行动”阶段拆分为三个同级子阶段：传统数据外泄、模型提取和智能体枢转。 作者：Gourav Nagar 版本：1.0 日期：2026 年 5 月 19 日 仓库：https://github.com/gouravnagar-infosec/ai-kill-chain 引用格式：Nagar, G. 2026. Extended Cyber Kill Chain...

crucible

██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝ ╚═════╝╚═╝╚════...

defenseclaw

/ \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Security governance for AI coding agents and agentic runtimes. Scan capabilities before use, inspect runtime traffic, and export durable audit...

VulnHunter

VulnHunter !NOTE 一个持续维护的分支 ，源自 Capital One 的 VulnHunter（Apache-2.0）——旨在 运行于任何 agent harness ，而不仅仅是 Claude Code。本分支的重点： harness 可移植性 、沙箱化（容器化）漏洞利用验证 ， 以及可量化影响的 PoC 。参见 为何做出这些更改 · 本分支更改了什么 · 数据。 从模式匹配到可证明性。 VulnHunter 是一款开源的 agentic AI 安全工具 ，将主动的、攻击者优先的分析直接应用于源代码。 与传统的被动式 SAST...

nuguard

js-sdsl logo 一款参考 C++ STL 实现的 JavaScript 标准数据结构库 English | 简体中文 ✨ 包含的数据结构 Stack - 先进后出的堆栈 Queue - 先进先出的队列 PriorityQueue - 堆实现的优先级队列 Vector - 受保护的数组，不能直接操作像 length 这样的属性 LinkList - 非连续内存地址的链表 Deque - 双端队列，向前和向后插入元素或按索引获取元素的时间复杂度为 O1 OrderedSet - 由红黑树实现的排序集合 OrderedMap - 由红黑树实现的排序字典 HashSet...

vigolium

Vigolium - 高保真漏洞扫描器，融合智能体 AI 与原生速度、模块化和精确性 Vigolium 提供两种互补的扫描模式： 原生扫描 （vigolium scan）：快速、强大且灵活。 确定性的多阶段扫描，包含 317 个模块，涵盖内容发现、浏览器/SPA 爬取以及主动/被动审计，覆盖注入、访问控制、文件/路径、API/协议、框架特定、云/基础设施以及带外（OAST）漏洞类别。 智能体扫描 （vigolium agent）：全面审计你的代码库。 AI 驱动的扫描，能够自主规划攻击、选择模块、生成自定义扩展并对结果进行分诊，将深度源代码审计与自主及针对性漏洞扫描相结合。 安装...

authproof-sdk

AuthProof SDK AuthProof はエージェント型AIのための暗号化委任プロトコルです。この分野のほとんどのプロトコルは、オペレーターが定義したポリシーに基づいて強制を行います。つまり、オペレーターはユーザーの本来の意図を後から拡大または再解釈する権限を持ちます。AuthProof...

nexus-os

Nexus OS 統制されたエージェンティックAIオペレーティングシステム 66クレート | 675コマンド | 86ページ | 5,229テスト | 10/10 OWASP | スタブゼロ ローカルファースト。エアギャップ可能。ポスト量子対応。Rustで構築。 アーキテクチャ | クイックスタート | 機能 | 監査ステータス | ドキュメント Nexus...

vigolium v0.4.8

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

mulot

mulot -4285F4?logo=googlechrome&logoColor=white Agentic AI web pentester that drives a browser. An open-weights LLM GLM-5.2, Gemma or Qwen drives a real headless Chromium through a Burp-style toolkit and works a target the way a human pentester would. No frontier model, no agent running inside a...

vigolium v0.4.4

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

CVE-2026-15995

Summary of CVE-2026-15995 : IBM Cognos Analytics 12.1.3 GA (build up to 12.1.3-2606251736) contains a race condition in the Agentic AI assistant’s concurrent request handling. Under certain concurrent usage, two authenticated users submitting the same action can cause incorrect report summaries o...

CVE-2026-15995

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

Security Bulletin: IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use (CVE-2026-15995)

Summary The IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant used by authorized analysts to query report summaries and perform related tasks. Under certain concurrent usage conditions, when two authenticated users submit the same...

CVE-2026-15995: Concurrent Execution using Shared Resource with Improper Synchronization

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

Guardian Agents: The Next Layer of Identity Governance

AI agents are moving through enterprise environments, inheriting permissions, traversing systems, and executing decisions at machine speed with minimal oversight. The identity infrastructure built to govern human access wasn't designed for autonomous actors, and the gap between what enterprises a...

Agentic AI: The Weapon That No Longer Needs a Warrior

Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point flying without the throw. The rifle placed a man's death a quarter mile beyond his sight, and the aircraft carried that death across oceans. At each turn, the distance...

This Week in Spring - June 23rd, 2026

Hi Spring fans! In this installment, we look at the wide and wonderful world of Spring, as usual, and there's a good amount to get to, fresh off the recent Spring Boot 4.1 generation release train, so let's dive right into it! I wrote a blog post looking at Spring Batch, MongoDB, and Spring Boot...