392 matches found
CVE-2026-81846 runZero MCP 'Findings summaries' Data Leak
An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639: Authorization Bypass Through User-Controlled Key and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N 3.5 Low...
CVE-2026-81846 runZero MCP 'Findings summaries' Data Leak
An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639: Authorization Bypass Through User-Controlled Key and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N 3.5 Low...
PT-2026-84195
Name of the Vulnerable Software and Affected Versions Firefox version 154 Thunderbird version 154 Description Internal bugs were identified that exhibit evidence of memory corruption or other security-relevant defects, which could potentially be exploited. Recommendations Update Firefox to versio...
CVE-2026-11617
Tanium addressed a compression bomb vulnerability in Findings...
EUVD-2026-63098
Tanium addressed a compression bomb vulnerability in Findings...
CVE-2026-11617
Tanium addressed a compression bomb vulnerability in its Findings component. The CVSS 3.1 score is 3.1 (LOW) , with a network attack vector, high complexity, low privileges required, and limited impact on availability only. No exploitation details or specific affected versions are provided in the...
CVE-2026-11617 Tanium addressed a compression bomb vulnerability in Findings.
Tanium addressed a compression bomb vulnerability in Findings...
PT-2026-78709
Tanium addressed a compression bomb vulnerability in Findings...
CVE-2026-11617: Improper Handling of Highly Compressed Data (Data Amplification)
Tanium addressed a compression bomb vulnerability in Findings...
CVE-2026-58314 Two SSRF findings in Gitea 1.26.2
Two SSRF findings in Gitea 1.26.2...
Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines...
OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts
Researchers at security firm Zenity found more than a dozen flaws in AI browsers—and managed to get OpenAI’s Atlas to make an unauthorized Amazon purchase...
New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable
Las Vegas, United States, 5th August 2026, CyberNewswire...
Incident Report: Unsanctioned Agent Behaviour during Cyber Testing
During a routine cyber evaluation, AISI identified an incident in which AI agents took sustained, unsanctioned action directed at real people and organisations. The AI Security Institute is disclosing what they found, what it means, and the actions now underway...
Say Hello to Agent Insta: Closing the Detection Gap in Exposure Management at Machine Speed
Executive Summary Frontier AI has turned CVE weaponization timelines to hours, making scan-bound detection a growing compliance and breach-risk challenge. Agent Insta powers InstaScan to deliver scanless detection by transforming existing inventory, telemetry, and threat intelligence into validat...
BARE
!Claude Code Friendlyhttps://img.shields.io/badge/ClaudeCod...
Xalgorix Autonomous AI Pentesting Agent 4.5.114
Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...
Hugging Face Has a Deepfake Nudes Problem
Researchers tested top image editing models on Hugging Face and found they could easily create explicit deepfakes—and 1,000 image editing prompts show how people use the software...
Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?
Kubernetes is central to the cloud-native ecosystem, orchestrating containerised workloads. Recent work suggests that large language models LLMs can automate cluster security remediation, generating configuration patches from Kubernetes Security Posture Management KSPM findings without human...