Cheap to Hypothesize, Costly to Verify: The Defense Surface of Agentic Vulnerability Discovery

Autonomous LLM agents turn vulnerability discovery into a repository-scale search: they generate many vulnerability hypotheses but can verify only a subset under a finite budget. We show that autonomous vulnerability discovery exhibits a hypothesis-verification asymmetry, where verifying a...

xss

XSSentinel — Comprehensive XSS Detection Framework A mult...

wbx

wbx A white-box web application security testing tool. Point...

Sandb0x-Xtract0r

SandB0x-Xtract0r An automated, cross-platform security analysis engine for safely detonating suspicious files, binaries, and applications. 🎬 Watch the Project Demo 💻 Tech Stack Core Programming Languages, Core Systems !Darthttps://img...

log-sentinel

log-sentinel !CIhttps://github.com/07espigares/log-sentin...

SpectralCovert

📡 SpectralCovert -brightgreen.svg Deterministic Cryptographic Network Covert Channel & Shannon Entropy Leak Detector Developed by Çınar @prox0959 Academic Grade | Zero External Dependencies | Sub-Millisecond Analysis 🔬 Overview & Problem Statement Modern firewalls, deep packet inspection DPI...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94397 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94397 Source advisory: MEND:CVE-2026-94397...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94398 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94398 Source advisory: MEND:CVE-2026-94398...

CVE-2026-100584

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

EUVD-2026-87467

OpenClaw is an npm-distributed agent runtime. In versions = 2026.2.26 and 2026.7.1, PowerShell command analysis on Windows hosts running in exec allowlist mode could approve an exact executable resolved from PATH but subsequently execute a same-named executable located in the workspace directory...

Joern 4.0.639

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

sBOMBPath

sBOMBPath Finds whether user input in your Python code can re...

Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-176)

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All version...

reachproof

ReachProof Evidence-backed EU Cyber Resilience Act Article 14...

Joern 4.0.637

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-98409

💻 Опережать атакующего: как находить уязвимости раньше, чем ими воспользуются 15 октября в Санкт-Петербурге пройдёт конференция CNews Петербург: Передовые технологии и кейсы России. На ней Игорь Первушин, руководитель экспертизы СайберОК, выступит с докладом «Опережать атакующего: как находить...

Joern 4.0.636

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

DistillGuard: Malicious NPM Package Detection and API Attack Chain Analysis Via Static Graph and LLM Distillation

The Node.js ecosystem heavily relies on NPM packages, and software supply chain attacks targeting malicious NPM packages are rampant. Malicious code primarily triggers during package installation, import, and runtime. Traditional static analysis fails to understand code semantics; machine...

Automated Abstraction Refinement for Information Flow Security in Embedded Systems

Information flow analysis IFA is a powerful technique for verifying confidentiality and integrity and is therefore highly desirable for security-sensitive embedded systems. However, as these systems are inherently concurrent and time-dependent, existing IFA for embedded systems tend to be either...

Joern 4.0.635

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...