Falco 0.42.1

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI

This paper introduces the Agentic AI Governance Assurance & Trust Engine AAGATE, a Kubernetes-native control plane designed to address the unique security and governance challenges posed by autonomous, language-model-driven agents in production. Recognizing the limitations of traditional...

New Android Trojan 'Herodotus' Outsmarts Anti-Fraud Systems by Typing Like a Human

Cybersecurity researchers have disclosed details of a new Android banking trojan called Herodotus that has been observed in active campaigns targeting Italy and Brazil to conduct device takeover DTO attacks. "Herodotus is designed to perform device takeover while making first attempts to mimic...

CVE-2025-61301

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...

CVE-2025-61303: Uncontrolled Resource Consumption

Hatching Triage Sandbox Windows 10 build 2004 2025-08-14 and Windows 10 LTSC 20212025-08-14 contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample...

CVE-2025-61303

The RecordedFuture Triage cloud sandboxing service (specifically the Windows behavioral analysis engine ) is vulnerable to uncontrolled resource consumption in Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021 (2025-08-14) . A malicious sample can recursively spawn a large number of chi...

PT-2025-42814

Name of the Vulnerable Software and Affected Versions CAPEv2 versions prior to commit 52e4b43 on 2025-05-17 Description The software contains a flaw that allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports. This occurs by generating deeply nested or...

CAPE 安全漏洞

CAPE is a malware sandbox by the individual developer Kevin OReilly. CAPE has a security vulnerability that stems from an analysis denial vulnerability in reporting/mongodb.py and reporting/jsondump.py, which allows an attacker to submit samples to generate deeply nested or oversized behavioral...

PT-2025-42815

Name of the Vulnerable Software and Affected Versions Windows 10 build 2004 2025-08-14 Windows 10 LTSC 2021 2025-08-14 Description The Windows behavioral analysis engine contains a flaw that can allow submitted malware samples to avoid detection and cause a denial-of-analysis. The issue occurs wh...

CVE-2025-55332

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

EUVD-2025-34339

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55682

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55682

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55337

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55332

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

PT-2025-42017

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An issue exists in Windows BitLocker related to improper enforcement of behavioral workflow. This allows an unauthorized attacker to bypass a security feature through a physical...

CVE-2025-55330: Improper Enforcement of Behavioral Workflow

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

PT-2025-42032

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An issue with how behavioral workflow is enforced in Windows BitLocker can allow an attacker to bypass a security feature through a physical attack. The issue allows an unauthorized...

CVE-2025-55682: Improper Enforcement of Behavioral Workflow

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

PT-2025-42015

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An issue exists in Windows BitLocker related to improper enforcement of behavioral workflow. This allows an unauthorized attacker to bypass a security feature through a physical...