authproof-sdk

AuthProof SDK AuthProof es un protocolo de delegación criptográfica para IA agentiva. La mayoría de los protocolos en este espacio se aplican contra una política definida por el operador, otorgándole autoridad para expandir o reinterpretar la intención original del usuario después del hecho...

defenseclaw

root@kitploit: / \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw OpenClaw 与智能体 AI 运行时的安全治理。 在使用前扫描能力，检查运行时流量，并导出持久的审计证据。 治理| 检查| 探测 ---|---|--- 技能、MCP 服务器、插件和生成的代码在运行前| 提示词、补全、工具调用以及运行时沙箱活动|...

mulot

mulot -4285F4?logo=googlechrome&logoColor=white ブラウザを駆動するエージェント型AI Webペネトレーションテスター オープンウェイトのLLM（GLM-5.2、Gemma、Qwen）が、Burpスタイルのツールキットを通じて実際のヘッドレスChromiumを駆動し、人間のペネトレーションテスターと同じようにターゲットを攻撃します。 フロンティアモデルも、Kali VM内で動作するエージェントも不要です。 偵察 → 独自のJavaScriptペイロードを作成 → コマンドインジェクション → フラグ。...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision...

nuguard

js-sdsl logo 一款参考 C++ STL 实现的 JavaScript 标准数据结构库 English | 简体中文 ✨ 包含的数据结构 Stack - 先进后出的堆栈 Queue - 先进先出的队列 PriorityQueue - 堆实现的优先级队列 Vector - 受保护的数组，不能直接操作像 length 这样的属性 LinkList - 非连续内存地址的链表 Deque - 双端队列，向前和向后插入元素或按索引获取元素的时间复杂度为 O1 OrderedSet - 由红黑树实现的排序集合 OrderedMap - 由红黑树实现的排序字典 HashSet...

crucible

root@kitploit: ██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝...

ai-kill-chain

Extended Cyber Kill Chain para Amenazas de la Era IA Una actualización de la Cyber Kill Chain de Lockheed Martin para defensores que trabajan contra ataques de LLM e IA agente. Añade una etapa previa al ataque para el compromiso de la cadena de suministro del modelo. Añade sub-técnicas específica...

nexus-os

Nexus OS 受控的自主智能体操作系统 66 个 crate | 675 个命令 | 86 个页面 | 5229 个测试 | OWASP 10/10 | 零桩 本地优先。可断网隔离。后量子就绪。用 Rust 构建。 架构 | 快速开始 | 特性 | 审计状态 | 文档 Nexus OS 是一个 AI 智能体操作系统，其中智能体拥有一等公民地位，具备密码学身份、受控自主权以及演进能力。它完全运行在你的硬件上——无云端依赖，数据不离开你的机器，可断网隔离。每个操作都通过哈希链记录，每个决策都可审计，每个智能体都运行在沙箱中。 root@kitploit:...

vigolium v0.4.4

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

CVE-2026-15995

Summary of CVE-2026-15995 : IBM Cognos Analytics 12.1.3 GA (build up to 12.1.3-2606251736) contains a race condition in the Agentic AI assistant’s concurrent request handling. Under certain concurrent usage, two authenticated users submitting the same action can cause incorrect report summaries o...

CVE-2026-15995

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

Security Bulletin: IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use (CVE-2026-15995)

Summary The IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant used by authorized analysts to query report summaries and perform related tasks. Under certain concurrent usage conditions, when two authenticated users submit the same...

Guardian Agents: The Next Layer of Identity Governance

AI agents are moving through enterprise environments, inheriting permissions, traversing systems, and executing decisions at machine speed with minimal oversight. The identity infrastructure built to govern human access wasn't designed for autonomous actors, and the gap between what enterprises a...

Agentic AI: The Weapon That No Longer Needs a Warrior

Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point flying without the throw. The rifle placed a man's death a quarter mile beyond his sight, and the aircraft carried that death across oceans. At each turn, the distance...

This Week in Spring - June 23rd, 2026

Hi Spring fans! In this installment, we look at the wide and wonderful world of Spring, as usual, and there's a good amount to get to, fresh off the recent Spring Boot 4.1 generation release train, so let's dive right into it! I wrote a blog post looking at Spring Batch, MongoDB, and Spring Boot...

The End of Trust: How Agentic AI Breaks Security Assumptions

For decades, the security of digital interaction has rested on an unacknowledged economic constraint. Attackers faced a tradeoff between the fidelity of a deception and the scale at which it could be deployed. Convincing impersonation required sustained human effort and was confined to a narrow s...

MATRA: Modeling the Attack Surface of Agentic AI Systems -- OpenClaw Case Study

LLMs are increasingly deployed as autonomous agents with access to tools, databases, and external services, yet practitioners across different sectors lack systematic methods to assess how known threat classes translate into concrete risks within a specific agentic deployment. We present MATRA, a...

MAL-2026-2874 Malicious code in unisys-agentic-ai-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ec6c43f5a186c6e78aca52041174240070088e17078f1bcb9f63ac0d55f5f0 The package unisys-agentic-ai-playground was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in unisys-agentic-ai-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ec6c43f5a186c6e78aca52041174240070088e17078f1bcb9f63ac0d55f5f0 The package unisys-agentic-ai-playground was found to contain malicious code. Source: ossf-package-analysis...