Under the Hood of SKILL.Md: Semantic Supply-Chain Attacks on AI Agent Skill Registry

Autonomous AI agents increasingly extend their capabilities through Agent Skills: modular filesystem packages whose SKILL.md files describe when and how agents should use them. While this design enables scalable, on-demand capability expansion, it also introduces a semantic supply-chain risk in...

Defending Encryption in the Post Quantum Era

Post-quantum cryptography explained, risks of quantum attacks, and steps to secure data, systems, and infrastructure for a quantum-resilient…...

CASL 安全漏洞

CASL is a JavaScript library developed by Serhii Stotskyi. Versions 2.4.0 to 6.7.4 of CASL contain security vulnerabilities, which stem from prototype pollution and may lead to logical errors or other attacks...

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a security vulnerability that can be exploited by attackers to weaken the overall security of the application and increase the risk of common web attacks...

CVE-2023-29732

SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Dependi...

EUVD-2012-5040

Malware in sbrugna...

EUVD-2012-3945

Malware in sbrugna...

EUVD-2017-4610

Malware in sbrugna...

EUVD-2014-2890

Malware in sbrugna...

EUVD-2020-30685

Malware in sbrugna...

EUVD-2009-5013

Malware in sbrugna...

EUVD-2017-18489

Malware in sbrugna...

EUVD-2011-2366

Malware in sbrugna...

EUVD-2016-6049

Malware in sbrugna...

EUVD-2018-3458

Malware in sbrugna...

EUVD-2012-0494

Malware in sbrugna...

EUVD-2019-8730

Malware in sbrugna...

EUVD-2011-5021

Malware in sbrugna...

EUVD-2007-3690

Malware in sbrugna...

EUVD-2014-4771

Malware in sbrugna...