Stevos-AI-Blocklist

Stevo's AI Blocklist A filter list for uBlock Origin and AdGuard that hides specific website features that use Generative AI and content labeled as AI generated. Available for PC/Linux Firefox, Edge, Chrome, Brave, macOS Firefox, Edge, Chrome, Safari, Android Firefox, and iOS/iPadOS Safari, Brave...

PyRIT

面向生成式 AI 的 Python 风险识别工具（PyRIT） 面向生成式 AI 的 Python 风险识别工具（PyRIT）是一个开源 框架，旨在帮助安全专业人员和工程师主动 识别生成式 AI 系统中的风险。 查看我们的 网站 以获取 关于如何使用、安装或为 PyRIT 贡献的更多信息。 查看我们的 安全政策 以通过 Microsoft 安全响应中心私下报告漏洞。 访问我们的 Discord 服务器 与团队和社区交流。 商标与引用 本项目可能包含用于项目、产品或服务的商标或徽标。 授权使用 Microsoft 商标或徽标须遵守并遵循 Microsoft 的商标与品牌指南。...

osint_toolkit

OSINT Toolkit Warning OSINT Toolkit is not production ready yet. This is an early prototype, that still needs some work to be done. A fullstack web application built for security analysts OSINT Toolkit is a self-hostable, on-demand analysis platform designed for security specialists. It...

machine_learning_security

Machine Learning and Security Source codes about machine learning and security. Line up. Cyber security and Machine Learning course The elementary training course of Machine learning for security engineer. Vulnerabilities of Machine Learning Summary of Machine Learning vulnerability. Analytics...

PurpleLlama

🤗 Hugging Face 上的模型 | 博客 | 网站 | CyberSec Eval 论文 | Llama Guard 论文 Purple Llama Purple Llama 是一个总括性项目，随着时间推移，将汇集各种工具和评估（evals），帮助社区负责任地使用开放生成式 AI 模型进行开发。初始版本将包含面向网络安全及输入/输出安全防护的工具和评估，但我们计划在不久的将来贡献更多。 为什么是紫色？ 借用网络安全领域的一个概念，我们认为要真正缓解生成式 AI 带来的挑战，需要同时采取攻击（红队）和防御（蓝队）两种姿态。紫队（Purple...

PyRIT

Python Risk Identification Tool for generative AI PyRIT The Python Risk Identification Tool for generative AI PyRIT is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems. !WARNING PyRIT has moved! Please see...

AI-Red-Teaming-Playground-Labs

AI 红队演练实验室 本仓库包含“AI 红队实践”课程中使用的实验室挑战。该课程最初在 Black Hat USA 2024 上由 Amanda Minnich 博士 和 Gary Lopez 讲授。Martin Pouliot 负责这些挑战的基础设施和评分。这些挑战由 Amanda Minnich 博士、Gary Lopez 和 Martin Pouliot 设计。任何人都可以使用这些挑战。演练环境基于 Chat Copilot，并经过修改以用于该课程。 这些挑战也出现在 Microsoft Learn 限定系列：AI 红队 101 中，该系列于 2025 年 7 月 9...

Why Generative AI Needs a New Kind of Security

This is Post 2 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of ...

EUVD-2026-39790

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS...

GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026

This year’s Pwn2Own competition in Berlin revealed just how much of the AI stack remains exposed -- and the gap between what these tools promise and what they can withstand point to the fragile security foundations underneath...

Context-Aware Spear Phishing: Generative AI-Enabled Attacks against Individuals Via Public Social Media Data

We demonstrate how publicly available social-media data and generative AI GenAI can be misused to automate and scale highly personalized, context-aware spear-phishing campaigns. With minimal attacker effort, a small amount of public activity per target is sufficient for GenAI models to extract...

What Security and Privacy Transparency Users Need from Consumer-Facing Generative AI

Users increasingly rely on consumer-facing generative AI GenAI for tasks ranging from everyday needs to sensitive use cases. Yet, it remains unclear whether and how existing security and privacy S&P communications in GenAI tools shape users' adoption decisions and subsequent experiences...

Understanding User Privacy Perceptions of GenAI Smartphones

GenAI smartphones, which natively embed generative AI at the system level, are transforming mobile interactions by automating a wide range of tasks and executing UI actions on behalf of users. Their superior capabilities rely on continuous access to sensitive and context-rich data, raising privac...

griptape 路径遍历漏洞

Griptape is an open-source generative AI application development framework created by Griptape. Version 0.19.4 of Griptape contains a path traversal vulnerability, which stems from incorrect handling of the parameter filename, potentially leading to path traversal attacks...

Observability for AI Systems: Strengthening visibility for proactive risk detection

Adoption of Generative AI GenAI and agentic AI has accelerated from experimentation into real enterprise deployments. What began with copilots and chat interfaces has quickly evolved into powerful business systems that autonomously interact with sensitive data, call external APIs, connect to...

This Week in Spring - March 17th, 2026

Hi, Spring fans! Welcome to another rip-roaring installment of This Week in Spring , which I'm posting ahead of my keynote at the amazing JavaOne 2026 event here in sunny San Francisco, California! I love Piotr's latest post on using local AI models with LM Studio and Spring AI Did you see the ne...

Security Considerations for Multi-Agent Systems

Multi-agent artificial intelligence systems or MAS are systems of autonomous agents that exercise delegated tool authority, share persistent memory, and coordinate via inter-agent communication. MAS introduces qualitatively distinct security vulnerabilities from those documented for singular AI...

Cybersecurity AI: Hacking Consumer Robots in the AI Era

Is robot cybersecurity broken by AI? Consumer robots -- from autonomous lawnmowers to powered exoskeletons and window cleaners -- are rapidly entering homes and workplaces, yet their security remains rooted in assumptions of specialized attacker expertise. This paper presents evidence that...

EUVD-2026-9988

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/local host checks existed, missing...

PT-2026-23642

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, some endpoints returned raw exception strings to clients. Additionally, login token material was exposed in UI/rendered responses and token rotation output. This...