MAL-2025-25765 Malicious code in magellan-prompts-wormhole-apollo (npm)

The package magellan-prompts-wormhole-apollo was found to contain malicious code...

Malicious code in phenomic-bellatrix-prompts-node-config (npm)

The package phenomic-bellatrix-prompts-node-config was found to contain malicious code...

Malicious code in spica-remark-prompts-phoenix (npm)

The package spica-remark-prompts-phoenix was found to contain malicious code...

Malicious code in magellan-prompts-wormhole-apollo (npm)

The package magellan-prompts-wormhole-apollo was found to contain malicious code...

Malicious code in quark-protractor-prompts-yildun (npm)

The package quark-protractor-prompts-yildun was found to contain malicious code...

MAL-2025-25446 Malicious code in lithosphere-astro-prompts-paleoceanography (npm)

The package lithosphere-astro-prompts-paleoceanography was found to contain malicious code...

MAL-2025-14407 Malicious code in altair-publish-semantic-ui-prompts (npm)

The package altair-publish-semantic-ui-prompts was found to contain malicious code...

MAL-2025-33743 Malicious code in spica-remark-prompts-phoenix (npm)

The package spica-remark-prompts-phoenix was found to contain malicious code...

MAL-2025-29119 Malicious code in phenomic-bellatrix-prompts-node-config (npm)

The package phenomic-bellatrix-prompts-node-config was found to contain malicious code...

MAL-2025-31098 Malicious code in quark-protractor-prompts-yildun (npm)

The package quark-protractor-prompts-yildun was found to contain malicious code...

Malicious Package

Overview tidpd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview cafebasics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Jailbreaking Commercial Black-Box LLMs with Explicitly Harmful Prompts

Evaluating jailbreak attacks is challenging when prompts are not overtly harmful or fail to induce harmful outputs. Unfortunately, many existing red-teaming datasets contain such unsuitable prompts. To evaluate attacks accurately, these datasets need to be assessed and cleaned for maliciousness...

CVE-2025-55012

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...

The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

Most security tools can't see what happens inside the browser, but that's where the majority of work, and risk, now lives. Security leaders deciding how to close that gap often face a choice: deploy a dedicated Enterprise Browser or add an enterprise-grade control layer to the browsers employees...

Linux Distros Unpatched Vulnerability : CVE-2023-6867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The timing of a button click causing a popup to disappear was approximately the same length as the anti- clickjacking delay on permission prompts. It was possib...

Linux Distros Unpatched Vulnerability : CVE-2019-11748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of...

CVE-2025-55012 Zed AI Agent Remote Code Execution

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...

CVE-2025-55012

CVE-2025-55012 affects Zed, a multiplayer code editor. Before version 0.197.3, the Zed Agent Panel could allow an AI agent to bypass user permission checks and trigger Remote Code Execution by creating/modifying a project-specific configuration file, enabling arbitrary commands on a victim’s mach...

CVE-2025-55012 Zed AI Agent Remote Code Execution

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution RCE by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific...