openrasp

OpenRASP Introduction Unlike perimeter control solutions like WAF, OpenRASP directly integrates its protection engine into the application server by instrumentation. It can monitor various events including database queries, file operations and network requests etc. When an attack happens, WAF...

context-aware-offensive-intelligence

%PDF-1.5 % 15 0 obj endobj 17 0 obj stream x ŽnY+˶bĎc'␐:\WH.s4@K rKii-yPz vGhw4DT+.2^nxE;FS͋\n$5?Eѿtwvor%^xwO"kbUuK;\ Q&enut5m!$Vn+ U%&u7뚰/N\F1h0եyجIRWh48iRYAW?R$aΈğQJht,s7׽? F,sRiϢpӇؗn%j2ҾCUGᛰt-7"j:5J&az5Rwcj"h+KdįF؂rZ;Fԕ2ߺdЬUYj8hG鸏zp47wESV'J=h+ep8p8p8 W.hnw 8g:pKah4CA˧ztO3tF7J\ݍt|,PBsrؿ...

Occ

Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling ICME 2025 Official PyTorch Implementation of Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling. Paper link: IEEE, Arxiv. Get Started Dependencies Code is successfully tested on Linux with Pytorch 2.1.2 and CUDA...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

Enhancing LLM-Based Vulnerability Detection Via Representation-Aware Logical Ensemble

Automated vulnerability detection in C source code is a long-standing challenge, as traditional static analysis tools often trade precision for scalability and struggle with complex vulnerability patterns. Recently, large language models LLMs have shown promising results; yet, most approaches rel...

EUVD-2026-108750

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trustedproxies option is configured, heimdall extracts client IP addresses from the Forwarded for= parameter and X-Forwarded-For headers and exposes them as...

EUVD-2026-108749

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when Heimdall operates in proxy mode, it constructs the Forwarded HTTP header after executing the matched rule pipeline by inserting the incoming request's Host header value directly int...

The Psychology of an AI Hacker

Human hackers rely on composure, persistence, vigilance, and confidence under pressure. We investigate whether analogous emotion representations in AI models can improve cybersecurity AI performance. Using CT0, a 4B-parameter cybersecurity transformer released as alias3-micro, we extract 171...

Raise or Check? Predicting the Necessity of Additional Fuzzing for Continuous Fuzzing

Continuous fuzzing is used for vulnerability detection in Open Source Software OSS. Large-scale services such as Google's OSS-Fuzz fuzz over 1,300 projects and have revealed more than 10,000 vulnerabilities. Despite this, a considerable time lag often exists between when a vulnerability is...

HydraPoT: A Configurable Multi-Agent Framework for Cost-Aware LLM-Assisted Honeypots

Large language models LLMs can improve honeypot realism by generating dynamic, context-aware responses, but powerful cloud models incur substantial cost and latency, while lightweight models may provide weaker deception. This forces practitioners to choose between operational efficiency and...

SAFE-Mem: Secure Agentic Memory with Fine-Grained Authority and Governance-Aware Retrieval

Large language model LLM agents increasingly rely on persistent memory to support long-term reasoning and personalized interactions. However, information collected from external sources can introduce security risks when untrusted claims i.e., atomic statements are later treated as authorized...

Matoi: Selective Revalidation of Consequence Evidence for Agent Authorization

Matoi separates reusable consequence evidence from current execution authority and durable occurrence history. Its finite query-aware contract covers branches, ordered collections and negative lookups. A consumer reuses only its own checked evidence whose observations remain valid; signed request...

Exploring the Empirical Privacy Landscape of Synthetic Data

Methods for training language models on sensitive data differ in how they balance capability gains against the risk of leaking private information. In this paper, we present a controlled comparison of data-level and training-level interventions for navigating the capability-privacy tradeoff on...

Legitimate Reconstruction Advantage in Wiretapped Semantics-Aware Remote Monitoring

This paper investigates joint accuracy and security in semantics-aware remote monitoring, where source updates intended for a legitimate receiver may also be intercepted by an eavesdropper. We define legitimate reconstruction advantage LRA as the joint event that the intended receiver correctly...

AWARE-RG: Abstraction Aware Explanation of Resiliency Graphs for Cyber Physical Systems

Understanding the security posture of cyber physical systems CPS requires reasoning across both information technology IT and operational technology OT. However, a security analyst often holds an incomplete, role-specific view of the underlying system which has most likely resulted from their...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20 CNF vRAN extras topology aware lifecycle manager update

An update for topology-aware-lifecycle manager is available for Red Hat OpenShift Container Platform 4.20. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19 CNF vRAN extras topology aware lifecycle manager update

An update for topology-aware-lifecycle manager is available for Red Hat OpenShift Container Platform 4.19. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18 CNF vRAN extras topology aware lifecycle manager update

An update for topology-aware-lifecycle manager is available for Red Hat OpenShift Container Platform 4.18. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the...

Think Locally Before Computing Jointly: Efficient Secure Multi-Party Computation Via Maximizing Local Processing

Secure multi-party computation MPC lets parties evaluate a function over private inputs without revealing them. In garbled-circuit GC protocols, prior optimization has largely treated the number of non-linear gates, especially AND gates, as a proxy for cryptographic cost, and has focused on...

opa

Open Policy Agent Open Policy Agent OPA è un motore di policy open source e di uso generale che consente un'applicazione delle policy unificata e sensibile al contesto nell'intero stack. OPA è orgoglioso di essere un progetto graduated nel panorama della Cloud Native Computing Foundation CNCF. Pe...