0days-in-the-wild

野外利用的0-day漏洞 此仓库是关于检测到被野外利用的0-day漏洞的文档参考。它包括每个0-day漏洞利用的根本原因分析（RCA）以及跟踪每个0-day的表格。 这些文档旨在通过 Github Pages 查看：https://googleprojectzero.github.io/0days-in-the-wild 免责声明 这不是谷歌官方支持的产品。...

threat-team

Google Threat Intelligence Group Notice: This repository is no longer maintained. For the latest Indicators of Compromise IOCs and threat research, please refer to the Google Cloud Threat Intelligence blog and free Google Threat Intelligence / VirusTotal collections. This repository contains...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry 使用 Foundry 复现 DeFi 黑客事件。 包含 871 起事件。 让我们共同保障 Web3 安全！加入 Discord Notion：101 起过往 DeFi 黑客事件的根因分析 交易调试工具 免责声明： 本内容仅作为展示过往 DeFi 黑客事件的概念验证。其严格用于教育目的，不应被解读为鼓励或支持任何形式的非法活动或实际黑客攻击尝试。所提供的信息仅供信息参考和学习之用，基于此内容采取的任何行动均由个人自行承担责任。本信息的使用应遵守适用的法律、法规和道德标准。 目录 快速开始 谁支持我们 捐赠我们 过往 DeFi...

kernel-nday-exploits

Linux Kernel N-Day Exploits Local privilege escalation rese...

Exploit for CVE-2026-0532

CVE-2026-0...

Agentic Fuzzing: Opportunities and Challenges

Fuzzers and static analyzers find many bugs but struggle with logic bugs in mature codebases. Triggering such a bug often requires multi-step reasoning that produces no distinctive execution feedback, and variants can appear across implementations too different for a single pattern to match. Rece...

Beyond Code Reasoning: A Specification-Anchored Audit Framework for Expert-Augmented Security Verification

Security-critical software is routinely audited by tools that reason about vulnerabilities as repository-local code patterns. Yet specification-governed systems -- protocol stacks, consensus implementations, cryptographic libraries -- are constrained by invariants and correctness conditions defin...

cyber-punk

Cyber Punk Security Vulnerability Scanner A Claude Code plu...

Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513

Read how PatchDiff-AI uncovered the root cause of CVE-2026-21513 — an actively exploited MSHTML vulnerability — and how APT28 leveraged it in real-world attacks...

Exploit for CVE-2025-12197

Security Research This repository contains my security resea...

Patch Wednesday: Root Cause Analysis with LLMs

...

Inside the Fix: AI-Powered Root Cause Analysis of CVE-2025-60719

...

LLM-Based Vulnerability Discovery through the Lens of Code Metrics

Large language models LLMs excel in many tasks of software engineering, yet progress in leveraging them for vulnerability discovery has stalled in recent years. To understand this phenomenon, we investigate LLMs through the lens of classic code metrics. Surprisingly, we find that a classifier...

InfoFlood: Jailbreaking Large Language Models with Information Overload

Large Language Models LLMs have demonstrated remarkable capabilities across various domains. However, their potential to generate harmful responses has raised significant societal and regulatory concerns, especially when manipulated by adversarial techniques known as "jailbreak" attacks. Existing...

Mono: Is Your "Clean" Vulnerability Dataset Really Solvable? Exposing and Trapping Undecidable Patches and Beyond

The quantity and quality of vulnerability datasets are essential for developing deep learning solutions to vulnerability-related tasks. Due to the limited availability of vulnerabilities, a common approach to building such datasets is analyzing security patches in source code. However, existing...

Abnormal Asset Behavior Detected (Medium)

This asset behavior is an anomaly that needs to be verified for the root cause. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503203;...

OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine

As Ethereum continues to thrive, the Ethereum Virtual Machine EVM has become the cornerstone powering tens of millions of active smart contracts. Intuitively, security issues in EVMs could lead to inconsistent behaviors among smart contracts or even denial-of-service of the entire blockchain...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

This is a PoC exploit for CVE-2024-38063, a 0-day vulnerability...

CrowdStrike Reveals Root Cause of Global System Outages

Cybersecurity company CrowdStrike has published its root cause analysis detailing the Falcon Sensor software update crash that crippled millions of Windows devices globally. The "Channel File 291" incident, as originally highlighted in its Preliminary Post Incident Review PIR, has been traced bac...

Widespread IT Outage Due to CrowdStrike Update

Note: CISA will update this Alert with more information as it becomes available. Update 4:30 p.m., EDT, August 6, 2024: CrowdStrike has published its Root Cause Analysis RCA reportlink is external. According to CrowdStrike, “the full report elaborates on the information previously shared in our...