Systems Security Foundations for Agentic Computing

This paper articulates short- and long-term research problems in AI agent security and privacy, using the lens of computer systems security. This approach examines end-to-end security properties of entire systems, rather than AI models in isolation. While we recognize that hardening a single mode...

CVE-2025-7449

creationtimestamp| type| source ---|---|--- 2025-11-26 23:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6l2mpgooh2u 2025-11-27 14:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmc2leh72h...

Security Bulletin: Vulnerability in IBM DevOps Solution Workbench

Summary The following vulnerability was addressed in IBM DevOps Solution Workbench version 5.1. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent...

A Safety and Security Framework for Real-World Agentic Systems

This paper introduces a dynamic and actionable framework for securing agentic AI systems in enterprise deployment. We contend that safety and security are not merely fixed attributes of individual models but also emergent properties arising from the dynamic interactions among models, orchestrator...

CVE-2025-64064

creationtimestamp| type| source ---|---|--- 2025-11-25 21:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6idggbi4t2x...

Detego Global Launches Case Management Platform for Digital Forensics and Incident Response Teams

Horsham, United Kingdom, 25th November 2025, CyberNewsWire...

EUVD-2025-199545

Not used...

CVE-2025-10144

creationtimestamp| type| source ---|---|--- 2025-11-25 02:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gam2wkko2q...

EUVD-2025-198779

Malicious code in @seung-ju/react-hooks npm...

CVE-2025-66098

creationtimestamp| type| source ---|---|--- 2025-11-21 14:28:53+00:00| seen| https://gist.github.com/Darkcrai86/b3d34d03dabeae207956865bc2141a58 2025-11-21 15:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m65lmlhcng2q...

SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny

The U.S. Securities and Exchange Commission SEC has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the security practices that led to the 2020 supply chain attack. In a joint motion filed November 20, 2025,...

CVE-2025-55124

Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script...

TencentOS Server 4: tomcat (TSSA-2025:0440)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0440 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

EUVD-2025-198189

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password...

EUVD-2025-198192

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used...

Veeam Backup & Replication 13.0.1 In-Place Upgrade Version Requirement

Challenge When attempting to upgrade an existing Veeam Backup & Replication deployment to version 13, the installer displays a message stating: Unable to upgrade Veeam Backup & Replication: you can upgrade from version 12.3.1.1139 or later only. Solution Before attempting an in-place upgrade to...

Average Hardness of SIVP for Module Lattices of Fixed Rank

The problem of finding short vectors in Euclidean lattices is a central hard problem in complexity theory. The case of module lattices i.e., lattices which are also modules over a number ring is of particular interest for cryptography and computational number theory. The hardness of finding short...

EUVD-2025-197705

A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function of the file controller/api/hotelList.php. The manipulation of the argument subjectId/cityName results in sql injection. The attack can be...

Updated python-flask-cors packages fix security vulnerabilities

Log Injection Vulnerability in corydolphin/flask-cors. CVE-2024-1681 Improper Access Control in corydolphin/flask-cors. CVE-2024-6221 Improper Regex Path Matching in corydolphin/flask-cors. CVE-2024-6839 Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors...

CVE-2025-63892

creationtimestamp| type| source ---|---|--- 2025-11-13 08:35:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59514 2025-11-13 15:00:08+00:00| published-proof-of-concept| Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI 2025-11-18 17:49:45+00:00| seen|...