rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

Rapid7 Achieves ISO/IEC 42001 Certification for its AI Management System

Exciting news for AI governance! Rapid7 has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System AIMS. The certificate was issued by Schellman Compliance, LLC, an ANAB accredited certification body, following an independent audit of how we govern the AI...

Accessed, Never Disclosed: Silent Access to Protected Health Information by Medical Artificial Intelligence Agents

Medical artificial intelligence agents should retrieve patient identifiers only when a task requires them, the data-minimization principle behind the HIPAA minimum necessary standard for protected health information PHI. An agent can retrieve identifiers without revealing them. Such silent access...

CVE-2026-118550 AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-118552 AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Cross-Site Scripting XSS. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-118553 AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI Artificial Intelligence allows Stored XSS. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-118550: Drupal AI (Artificial Intelligence): Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows…

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI Artificial Intelligence allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

CVE-2026-118548: Drupal AI (Artificial Intelligence): Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection

Incorrect Authorization vulnerability in Drupal AI Artificial Intelligence allows Resource Injection. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2...

Drupal Artificial Intelligence authorization issue vulnerability

Drupal Artificial Intelligence versions prior to 0.0.0 and 1.4.11, as well as versions prior to 1.5.0 and 1.5.2, contain an authorization issue vulnerability. This vulnerability stems from improper storage of sensitive information, potentially allowing unauthorized retrieval of embedded sensitive...

Drupal Artificial Intelligence authorization issue vulnerability

Drupal Artificial Intelligence versions 0.0.0 through 1.3.13 and 1.4.0 through 1.4.8 contain an authorization issue vulnerability stemming from missing authorization checks, which may lead to forced browsing...

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services "developed using DeepSeek implementations," under a Department of Homeland Security order. They may also no longer buy information technology...

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence AI. "It's an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects tha...

UBUNTU-CVE-2026-102583

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

Blockchain-Enabled Artificial Intelligence and AI Agents for Secure Data Sharing and Cybersecurity Applications

Blockchain and artificial intelligence AI are converging into a single infrastructural layer for securing data sharing, model integrity, and autonomous decision-making across distributed systems. This paper presents a meta-synthesis that draws together four constituent studies covering adversaria...

testkube v2.13.1

The Open Testing Platform for AI-driven Engineering Teams Testkube provides a single platform for defining, running and analyzing automated tests, using your existing testing tools/scripts, running in your Kubernetes infrastructure...

PT-2026-81211

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description A use-after-free issue exists in the lwIP wget implementation. In the httpc recv cb function, when HTTP data storage fails, the callback frees the connection PCB Protocol Control Block but retur...

CVE-2026-60758

Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM component: AI. Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Artificial Intelligence. While the...

CVE-2026-60758: Improper Access Control

Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM component: AI. Supported versions that are affected are 25.12-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Artificial Intelligence. While the...

PT-2026-77379

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Artificial Intelligence versions 25.12 through 26.6 Description A flaw in the AI component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized...