destroylist archives

Destroylist: Phishing & Scam Domain Blacklist !Last Commithttps://img.shields.io/github/last-com...

Insight Partners and Glilot Capital Co-Lead $20M Investment in Way Security

Way Security raises $20M from Insight Partners and Glilot Capital to automate costly IAM operations with AI and help enterprises get more from existing tools...

mod-poc-msf-p3

┌──kali㉿kali-/Desktop └─$ python -i mod-poc-msf-p3.PY =====...

WordPress BookingPress Appointment Booking Pro 5.7.2 Authentication Bypass

WordPress BookingPress Appointment Booking Pro plugin version 5.7.2 contains an authentication bypass vulnerability in its REST API that may allow an unauthenticated attacker to bypass authentication and gain unauthorized access. The repository contains technical analysis, threat intelligence...

EXE-Bench: Ranking the Tradeoffs of AI-Based Windows Malware Detectors for Real-World Usability

Due to the lack of systematic evaluations, we are not yet able to determine which AI-based Windows malware detector to deploy in production, since existing evaluations i differ in terms of data used for both training and testing; ii do not consider temporal analysis to showcase whether models...

user-scanner v1.4.2

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 380+ total scan vectors —including 155+ email-integrated sites and 225+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...

On AI Safety and Security Technical Debt in Engineering AI-Enabled Systems

Artificial intelligence AI systems are increasingly deployed in high-stakes domains such as healthcare, autonomous driving, finance, and education. While these systems offer powerful data-driven and adaptive capabilities, their complexity, rapid evolution, and dependence on dynamic data pipelines...

EUVD-2026-42650

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal...

Why AI Needs a “Genie Coefficient”

This essay was written with Barath Raghavan, and originally appeared inIEEE Spectrum. Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what you ask an AI to do and the unspoken assumptions about how you want the AI to do it. We propose a ne...

New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims

Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identify high-value victims quickly...

EUVD-2026-48451

Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...

A New Threat Landscape Meets A New Kind of Defender

Three years ago we launched a bug bounty program to accelerate WordPress security research, and it has been incredibly successful and has since secured the WordPress community against 9,727 vulnerabilities reported through our program. We have thus far awarded a total of $981,251 to researchers...

Blockchain Life Returns to Dubai — Featuring the Debut of AI Future

Dubai, UAE, 23rd July 2026, CyberNewswire...

Every Application Now Lives in an AI Ecosystem

Discover why modern applications are all part of the AI ecosystem, how real-time inference drives performance, and how to avoid hidden data transfer costs...

RHSA-2026:42875 Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - aom

Bulletin has no description...

opencti v7.260722.0

Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...

PT-2026-64029

Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjacent attackers to read arbitrary host files outside the open workspace by injecting instructions into content the agent processes. Attackers can supply absolute paths or file://...

GHSA-64XH-79J6-R5V8 n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes

Impact The credential "Allowed HTTP Request Domains" allowlist was intended to restrict which hosts a credential's secret could be sent to, protecting shared credentials from users who could use but not view them. Several AI/LLM nodes did not enforce this allowlist when a user-supplied base or...

EUVD-2026-42609

n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector...

NPM: n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector

NPM: n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector vulnerability discovered by ? in WordPress Npm n8n versions 2.27.4...