IAGA-Sentinel

IAGA Sentinel AIエージェント向けEU AI法適合性エビデンスレイヤー。 エージェントが経由するすべてのアクションについて、暗号署名され、再生検証可能なエビデンスを提供し、AI法第12条の記録保持および附属書IVの文書化をサポートする構造を備えています。 ドキュメント · ワンプロンプトでセットアップ · クイックスタート · 自律エージェントのセットアップ · コミュニティ版 vs エンタープライズ版 · 私たちについて · ライセンス...

grafeo

Платформа ACT теперь называется grafeo! Grafeo — это универсальная платформа для создания пользовательских моделей данных, сбора и обмена знаниями. Это гибкое, всестороннее решение, которое можно использовать для любых целей. Разработанная в рамках исследовательского проекта ACT, она остаётся ядр...

OWASP-Model-Card-Security-Standard

OWASP モデルカードセキュリティ標準 ステータス: ドラフト — インキュベーション中の OWASP プロジェクト この標準は活発に開発中です。貢献とフィードバックを歓迎します。 これは何ですか？ HuggingFace...

CVE-2026-61628

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-61628 CVE-2026-61628 nginx-ignition 2.41.0 - lucasdillmann I am @abraxasnull. Loopback lab. The client is CVE-2026-61628-Abraxas-Labs.py. Onboarding is anonymous. First-boot POST /api/users/onboarding/finish...

PT-2026-106564

In the Linux kernel, the following vulnerability has been resolved: net/sched: act api: release tail references on DELACTION failure A batched RTM DELACTION request takes a temporary reference on each action before attempting any deletion. tcf action delete clears each processed slot and drops it...

Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study

The EU Cyber Resilience Act CRA, Regulation EU 2024/2847, makes product cybersecurity a lifecycle obligation for products with digital elements on the EU market: risk assessment, vulnerability handling, conformity documentation, and Article 14 incident- and vulnerability-reporting readiness must ...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Do not pass actlen in the usbbulkmsg error path. syzbot reported that actlen in kalmiasendinitpacket is uninitialized when it is passed to the first usbbulkmsg error path. Jiri Pirko noted that it’s pointless to...

hardware-compliance-handbook

Hardware Compliance Knowledge Base A fact-checked, open reference on the EU laws that govern hardware and IoT cybersecurity — CRA, RED, NIS2, and the Cybersecurity Act/EUCC, in one place instead of four. Prepared by Platanor Technologies platanor.com — an embedded security firm for IoT device...

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing's state security service. In a "Security Service Espionage Alert" issued on September 30, 2026, MI5 said the "primary purpos...

PT-2026-104588

Name of the Vulnerable Software and Affected Versions act runner affected versions not specified Description The act runner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When privileged mode is disabled, the system only forces the...

PT-2026-105548

Summary act runner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML a...

CERTFR-2026-ACT-041

creationtimestamp| type| source ---|---|--- 2026-09-28 12:19:21+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mwlcdqjr4i2n 2026-09-28 12:19:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117348627942943001...

An Empirical Study and Assessment of EU AI Act Compliance Checkers

The EU AI Act introduces extensive compliance requirements for organizations that develop, deploy, or integrate AI systems. Many of these requirements are directly relevant to security and privacy, while also addressing closely related issues such as data governance, transparency, accuracy, and...

reachproof

ReachProof Evidence-backed EU Cyber Resilience Act Article 14...

PT-2026-98552

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.3-rc1 Description An issue exists in the MPLS push/pop path where skb mpls pop fails to clear the inner protocol record. This allows a stale network header offset to persist. When Open vSwitch re-pushes MPLS onto a packe...

PT-2026-98556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/sched component where a batched RTM NEWACTION request can lead to memory and resource leaks. When replacing an existing action, the tcf idr check alloc functio...

CVE-2026-43642

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

CVE-2026-43642 Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

EUVD-2026-84622

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

CVE-2026-43642 Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...