39053 matches found
HiveTraceGuard-Pro: A Compact Generative Guardrail for Prompt Injection, Jailbreaks, and Adversarial Obfuscation
Production LLMs must handle inputs that attempt to override system instructions, bypass safety policies or elicit harmful responses. A common mitigation is a separate guardrail model. Existing reports, however, provide little evidence on Russian prompt injection or Russian surface obfuscation. We...
PhantomCall: Evading ML Malware Detectors Via Function Call Graph Perturbation
Prior adversarial attacks on Windows PE malware detectors target raw bytes, PE headers, or intra-function control-flow graphs, leaving the function call graph FCG unexplored as an attack surface. Yet the FCG structure is an important feature in graph-based malware detectors. We present Phan-...
Safer Dependencies 0.6.1
safer-dependencies is a security layer for Claude Code: it sits between Claude and your manifest files and runs its security checks automatically: vulnerable installs are denied before they run, and a risky version written to a manifest is corrected on disk right after the write. It detects and...
sublime-rules — Updated!
Sublime Rules by Sublime Security This repo contains open-source rules for Sublime, a free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Examples HTML smuggling VIP / Executive impersonation Malicious OneNote files Malicious LNK files...
invisible_playwright v0.7.2
Playwright gets caught by anti-bots and captchas. This one runs on an anti-detect Firefox with an undetected fingerprint, compatible with your existing Playwright code. How it works Anti-bots ask two questions, and reCAPTCHA, hCaptcha and Cloudflare Turnstile score the answers. invisibleplaywrigh...
Awesome-LLMs-for-Vulnerability-Detection — Updated!
Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier. Title| Venue| Year| Paper| Github...
awesome-soc — Updated!
Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...
USBvalve v1.0.1
!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...
NoiseHound v1.2.0
NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...
CVE-2026-82863
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...
EUVD-2026-68451
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...
CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...
CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...
CVE-2026-82863
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. An attacker with appropriate access can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring....
CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...
CVE-2026-81315
creationtimestamp| type| source ---|---|--- 2026-08-31 01:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mudqh4o55v2u...
Explainable Artificial Intelligence for Industrial Cybersecurity: A Review of Methods, Operational Integration, and Research Challenges
The increasing digitalization of industrial infrastructure and the convergence of information technology IT and operational technology OT have expanded the cyberattack surface of industrial systems. To address the growing complexity of cyber threats, artificial intelligence AI and machine learnin...
AIDE 0.19.4
AIDE Advanced Intrusion Detection Environment is a free replacement for Tripwiretm. It generates a database that can be used to check the integrity of files on server. It uses regular expressions for determining which files get added to the database. You can use several message digest algorithms ...
EUVD-2026-68230
WWBN AVideo current e01e41ecc and earlier contains a brute-force rate limiting bypass in enforceRateLimit, which protects login.json.php and 13 other endpoints. The function stores its attempt counter via a cache layer ObjectYPT::setCacheGlobal that silently discards writes for any client...