CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems

Agent Skills allow LLM agents to combine reusable capabilities, but checking each Skill in isolation cannot rule out policy violations when they are composed. We term such failures Conflict of Skills CoS: artifacts or assessment signals produced for one purpose may be reused downstream without...

cosa-nostra

Cosa Nostra Cosa Nostra es un conjunto de herramientas de agrupamiento de software de código abierto centrado en el análisis de malware. Puede crear árboles filogenéticos de muestras de malware binarias que son estructuralmente similares. Fue lanzado inicialmente durante SyScan360 Shanghái 2016...

CoSA: Context-Aware Severity Assessment Via Context Analysis with Large Language Models

Accurate vulnerability severity assessment is essential for prioritizing remediation, yet manually assessing Common Vulnerability Scoring System CVSS base metrics remains labor-intensive. Existing automated approaches often fail to capture the repository-level evidence required for assessing many...

November 20, 2025—KB5070312 (OS Build 22631.6276) Preview

November 20, 2025—KB5070312 OS Build 22631.6276 Preview Applies To Windows 11 version 23H2, all editions This non-security update for Windows 11, version 23H2 KB5070312, improves functionality, performance, and reliability. To learn more about differences between security updates, optional...

February 25, 2025—KB5052077 (OS Build 19045.5555) Preview

February 25, 2025—KB5052077 OS Build 19045.5555 Preview Applies To Windows 10, version 22H2, all editions Note Support for Windows 10 has ended on October 14, 2025 After October 14, 2025, Microsoft will no longer provide free software updates from Windows Update, technical assistance, or security...

October 26, 2023—KB5031445 (OS Build 19045.3636) Preview

October 26, 2023—KB5031445 OS Build 19045.3636 Preview Applies To Windows 10, version 22H2, all editions Note 11/17/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 10, version...

RDK CcspWifiAgent Module Command Execution Vulnerability

RDK is a modular, portable, customizable open source IoT software solution from the RDK Management community. ccspWifiAgent is one of the modules that supports WiFi functionality. A security vulnerability exists in the cosawifiapis.c file of the CcspWifiAgent module in RDK version RDKB-20181217-1...

CVE-2019-6963

A heap-based buffer overflow in cosadhcpv4dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field of an IP reservation form in the admin panel. This is related to the...