Apps Marketed to US Troops Are Shipping Chinese and Russian Code

A first-of-its-kind analysis found more than one in eight apps built for US service members carried foreign code—some from firms in nations the Pentagon designates as adversaries...

vibesec-static

vibesec-static — static vulnerability auditor for Python A si...

zero-copy-web-application-firewall

Z-WAF — Zero-Copy Web Application Firewall Z-WAF is a Windows...

Chiral Analysis of Smart Contracts: Detecting Vulnerabilities from Relational Inconsistencies across Business Paths

Smart-contract vulnerabilities often arise from inconsistencies between business paths that should correspond to one another, such as single and batch entry points, direct and adapter-based flows, quote and execution paths, or inverse operations such as buy and sell. Existing analyzers are...

Residual Observability and Attack Detectability in Encrypted OPC UA Traffic

OPC Unified Architecture OPC UA encryption conceals application-layer semantics and restricts intrusion detection to residual communication structure. Although machine learning-based intrusion detection systems IDSs can detect attacks in encrypted OPC UA traffic, the relationship between residual...

GARAGE: Characterizing the Automation Boundary in LLM-Based Attack Graph Generation

While modern vehicle security depends on effective Cyber Threat Intelligence CTI synthesis, current automated tools struggle with unstructured data and automotive-specific architectural nuances. To bridge this gap, we introduce GARAGE, a RAG-powered framework that converts fragmented CTI into an...

RRAM-DP: Device-Calibrated Differential Privacy for In-Memory Edge Learning

Edge Artificial Intelligence of Things AIoT systems often collect sensitive data in situ, raising serious privacy concerns. Resistive-switching random-access memory RRAM is an attractive substrate for efficient AIoT thanks to its multi-bit storage and compute-in-memory CiM capabilities, while its...

noir v1.2.0

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies, and the source...

CVE-2026-63936

In the Linux kernel, the following vulnerability has been resolved: iio: adc: mt6359: fix unchecked return value in mt6358readimp In mt6358readimp, the variable valv is passed to regmapread but the return value is not checked. If the read fails, valv remains uninitialized and its random stack...

CVE-2026-63838 ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]

In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-of-bounds access of componentdais componentdaisRSNDMAXCOMPONENT is initially zero-initialized and later populated in rsnddaiofnode. However, the existing boundary check: if i = RSNDMAXCOMPONENT does...

waf-log-detector

WAF Log Detector A defensive analyzer for HTTP access logs. I...

BythosEngine

Bythos Engine Modular binary analysis & exploit research...

APEX_FRAMEWORK

ApexFramework A high-performance Ruby-based framework for sec...

GHSA-RWXX-MRJM-WC2M vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

Summary The structuredoutputs.regex API parameter passes a user-supplied regex string directly to grammar compiler backends with no compilation timeout. In the xgrammar backend, the string reaches compileregex with no guard. In the outlines backend, validateregexisbuildable blocks structural issu...

vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

Summary The structuredoutputs.regex API parameter passes a user-supplied regex string directly to grammar compiler backends with no compilation timeout. In the xgrammar backend, the string reaches compileregex with no guard. In the outlines backend, validateregexisbuildable blocks structural issu...

Malicious code in n8n-nodes-final-mile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c87dad5030c245317bd34041521d73d8c112d79018db381d749c80739d539f The package advertises itself as a community utility node for n8n but its declared main index.js is a self-executing IIFE that runs the moment n8n...

MAL-2026-10776 Malicious code in n8n-nodes-final-mile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c87dad5030c245317bd34041521d73d8c112d79018db381d749c80739d539f The package advertises itself as a community utility node for n8n but its declared main index.js is a self-executing IIFE that runs the moment n8n...

MAL-2026-10775 Malicious code in n8n-nodes-devops-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464fa8baaffef716b3920968d35dfbf6c8d49cd439ad5c5bd45050074436d79b Package masquerades as an n8n community node package.json declares n8n.nodes: "MyNode.js", a trivial placeholder while index.js contains an unrelated...

Malicious code in n8n-nodes-devops-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464fa8baaffef716b3920968d35dfbf6c8d49cd439ad5c5bd45050074436d79b Package masquerades as an n8n community node package.json declares n8n.nodes: "MyNode.js", a trivial placeholder while index.js contains an unrelated...

MAL-2026-10777 Malicious code in n8n-nodes-probe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d1aeabd688ffe2fdb4206f6fc715413358a40ec3203ad213dc37bb123eaf62 The package advertises itself as an n8n community-node utility but its main entry index.js executes a recon routine at module load. On require, it...