PT-2026-7587

A Time-of-check time-of-use TOCTOU race condition in the AMD Secure Processor ASP could allow an attacker to modify External Global Memory Interconnect Trusted Agent XGMI TA commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability...

Optimizing Agent Planning for Security and Autonomy

Indirect prompt injection attacks threaten AI agents that execute consequential actions, motivating deterministic system-level defenses. Such defenses can provably block unsafe actions by enforcing confidentiality and integrity policies, but currently appear costly: they reduce task completion...

Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP

The rapid development of the AI agent communication protocols, including the Model Context Protocol MCP, Agent2Agent A2A, Agora, and Agent Network Protocol ANP, is reshaping how AI agents communicate with tools, services, and each other. While these protocols support scalable multi-agent...

CVE-2026-1495 Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent

The vulnerability, if exploited, could allow an attacker with Event Log Reader S-1-5-32-573 privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: argo-events, pulumi, witness, gitaly, trivy-operator, xeol, argo-workflows-fips, flux-fips, syft-fips, rancher-fleet, argocd-image-updater, flux-image-automation-controller, nuclei, google-osconfig-agent, grype-db, gitea, flux-kustomize-controller-fips, gitsign, apko...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: argo-events, pulumi, witness, gitaly, trivy-operator, xeol, argo-workflows-fips, flux-fips, syft-fips, rancher-fleet, argocd-image-updater, flux-image-automation-controller, nuclei, google-osconfig-agent, grype-db, gitea, flux-kustomize-controller-fips, gitsign, apko...

CVE-2025-0031

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLESOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...

February 10, 2026—KB5075971 (Monthly Rollup)

None None...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: atlantis-fips, mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, azure-ipam, terraform-provider-aws-fips, mattmoor-chainit, dataplaneapi-fips, vertical-pod-autoscaler, secrets-store-csi-driver-provider-gcp,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: atlantis-fips, mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, azure-ipam, terraform-provider-aws-fips, mattmoor-chainit, dataplaneapi-fips, vertical-pod-autoscaler, secrets-store-csi-driver-provider-gcp,...

AVEVA PI to CONNECT Agent

RISK EVALUATION Successful exploitation of this vulnerability could result in an unauthorized access to the proxy server. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all...

[SECURITY] Fedora 43 Update: rust-rd-agent-2.2.5-14.fc43

Management agent for resctl-demo...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-agent-0.2.4-3.fc43

Event collector agent for crypto-auditing project...

[SECURITY] Fedora 43 Update: rust-afterburn-5.10.0-3.fc43

A simple cloud provider agent...

[SECURITY] Fedora 43 Update: keylime-agent-rust-0.2.8-10.fc43

The Keylime agent...

AMD Graphics Driver Vulnerabilities – February 2026

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description | CVSS Score ---|---|--- CVE-2024-36324| Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.| 8.8 High...

Exploit for CVE-2026-2256

CVE-2026–2256 PoC Executive Summary A critical command in...

SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity

Deep Reinforcement Learning DRL has achieved remarkable success in domains requiring sequential decision-making, motivating its application to cybersecurity problems. However, transitioning DRL from laboratory simulations to bespoke cyber environments can introduce numerous issues. This is furthe...

GitLab AI Gateway 安全漏洞

GitLab AI Gateway is an artificial intelligence service middleware provided by the US company GitLab. Versions 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 of GitLab AI Gateway contain security vulnerabilities. These vulnerabilities stem from insecure template extensions of data provided ...

ROS-20260209-73-0039

A vulnerability in the Agent component of the Zabbix IT infrastructure monitoring system is related to the use of an insecure search path. Exploitation of the vulnerability could allow an attacker to gain write access to arbitrary system files in the /home/cecuser directory...