0days-in-the-wild

야생에서 악용된 0-day 이 저장소는 야생에서 악용된 것으로 탐지된 0-day 취약점에 관한 문서 모음입니다. 각 0-day 익스플로잇에 대한 근본 원인 분석RCA과 각 0-day를 추적하는 표를 모두 포함합니다. 이 문서들은 Github Pages를 통해 열람하도록 작성되었습니다: https://googleprojectzero.github.io/0days-in-the-wild 고지 사항 이 제품은 공식적으로 지원되는 Google 제품이 아닙니다...

threat-team

Google 위협 인텔리전스 그룹 알림: 이 저장소는 더 이상 유지 관리되지 않습니다. 최신 침해 지표IOC 및 위협 연구에 대해서는 Google Cloud Threat Intelligence 블로그와 무료 Google Threat Intelligence / VirusTotal 컬렉션을 참조하십시오. 이 저장소에는 2021년부터 2026년 초까지 Google에서 게시한 공개 블로그 게시물 및 보고서와 관련된 침해 지표IoC가 포함되어 있습니다. IoC는 연도별로 정리되어 있으며, 각 폴더는 특정 블로그 게시물 또는 보고서와...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry 2023 - List of Past DeFi Incidents 214 incidents included. 20231231 Channels BUSD&USDC 20231230 ChannelsFinance 20231228 CCV 20231228 DominoTT 20231225 Telcoin 20231222 PineProtocol 20231220 TransitFinance 20231217 Bob 20231217 FloorProtocol 20231216 GoodDollar...

kernel-nday-exploits

Linux Kernel N-Day Exploits Local privilege escalation rese...

Exploit for CVE-2026-0532

CVE-2026-0...

Agentic Fuzzing: Opportunities and Challenges

Fuzzers and static analyzers find many bugs but struggle with logic bugs in mature codebases. Triggering such a bug often requires multi-step reasoning that produces no distinctive execution feedback, and variants can appear across implementations too different for a single pattern to match. Rece...

Beyond Code Reasoning: A Specification-Anchored Audit Framework for Expert-Augmented Security Verification

Security-critical software is routinely audited by tools that reason about vulnerabilities as repository-local code patterns. Yet specification-governed systems -- protocol stacks, consensus implementations, cryptographic libraries -- are constrained by invariants and correctness conditions defin...

cyber-punk

Cyber Punk Security Vulnerability Scanner A Claude Code plu...

Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513

Read how PatchDiff-AI uncovered the root cause of CVE-2026-21513 — an actively exploited MSHTML vulnerability — and how APT28 leveraged it in real-world attacks...

Exploit for CVE-2025-12197

Security Research This repository contains my security resea...

Patch Wednesday: Root Cause Analysis with LLMs

...

Inside the Fix: AI-Powered Root Cause Analysis of CVE-2025-60719

...

LLM-Based Vulnerability Discovery through the Lens of Code Metrics

Large language models LLMs excel in many tasks of software engineering, yet progress in leveraging them for vulnerability discovery has stalled in recent years. To understand this phenomenon, we investigate LLMs through the lens of classic code metrics. Surprisingly, we find that a classifier...

InfoFlood: Jailbreaking Large Language Models with Information Overload

Large Language Models LLMs have demonstrated remarkable capabilities across various domains. However, their potential to generate harmful responses has raised significant societal and regulatory concerns, especially when manipulated by adversarial techniques known as "jailbreak" attacks. Existing...

Mono: Is Your "Clean" Vulnerability Dataset Really Solvable? Exposing and Trapping Undecidable Patches and Beyond

The quantity and quality of vulnerability datasets are essential for developing deep learning solutions to vulnerability-related tasks. Due to the limited availability of vulnerabilities, a common approach to building such datasets is analyzing security patches in source code. However, existing...

Abnormal Asset Behavior Detected (Medium)

This asset behavior is an anomaly that needs to be verified for the root cause. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503203;...

OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine

As Ethereum continues to thrive, the Ethereum Virtual Machine EVM has become the cornerstone powering tens of millions of active smart contracts. Intuitively, security issues in EVMs could lead to inconsistent behaviors among smart contracts or even denial-of-service of the entire blockchain...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

This is a PoC exploit for CVE-2024-38063, a 0-day vulnerability...

CrowdStrike Reveals Root Cause of Global System Outages

Cybersecurity company CrowdStrike has published its root cause analysis detailing the Falcon Sensor software update crash that crippled millions of Windows devices globally. The "Channel File 291" incident, as originally highlighted in its Preliminary Post Incident Review PIR, has been traced bac...

Widespread IT Outage Due to CrowdStrike Update

Note: CISA will update this Alert with more information as it becomes available. Update 4:30 p.m., EDT, August 6, 2024: CrowdStrike has published its Root Cause Analysis RCA reportlink is external. According to CrowdStrike, “the full report elaborates on the information previously shared in our...