yolo-cage

yolo-cage: 해를 끼치지 않는 자율 코딩 에이전트 당신은 책임감 있는 엔지니어입니다. AI가 가장 민감한 시스템과 코드베이스를 마구 휘젓도록 내버려두지 않을 것입니다. 그렇기에 Claude Code와 같은 도구의 안전 장치를 절대 해제하지 않을 것입니다. 위험한 작업마다 허가를 요청하니까요! 안전합니다! 그래서 당신은 기다립니다. 그리고 응답합니다. 결정 피로가 쌓입니다. 그리고 바로 그때 일이 발생합니다. 권한 프롬프트는 위협 모델의 가장 약한 부분인 피곤한 사용자를 무시합니다. 에이전트의 폭발 반경을 제한하면서 권한...

Black Hat Europe 2024 Conference Slides

Black Hat Europe 2024 conference slides for topics Vulnerabilities in the eSIM download protocol, WiFi Calling: Revealing Downgrade Attacks and Not-so-private private Keys, From Pass-the-Hash to Code Execution on Schneider Electric M340 PLCs, CodeCloak: A DRL-Based Method for Mitigating Code...

PT-2026-48474

Name of the Vulnerable Software and Affected Versions @hulumi/policies versions prior to 1.4.0 Description IAM-role policy checks can be bypassed when a role trusts multiple OIDC OpenID Connect providers. The issue occurs when the Principal.Federated field contains a JSON array of multiple...

Strengthening Polymorphic Prompt Assembling: Dynamic Separator Generation against Emerging Prompt Injection Attacks

Polymorphic Prompt Assembling PPA defends LLM agents against prompt injections by randomly selecting separator pairs from a fixed pool to isolate user input from system instructions. Although effective, static pool reuse exposes a blast-radius vulnerability: once a separator leaks, it can be...

CLSA-2026-1779461988 krb5: Fix of 3 CVEs

CVE-2024-3596: generate and verify Message-Authenticator MACs in libkrad to mitigate the BlastRADIUS attack on the RADIUS protocol; includes follow-up fix for uninitialized pointer dereference in kradpacketdecoderequest - CVE-2024-37370: prevent modification of Extra Count field in GSS krb5 wrap...

AI Native Asset Intelligence

Modern security environments generate fragmented signals across cloud resources, identities, configurations, and third-party security tools. Although AI-native security assistants improve access to this data, they remain largely reactive: users must ask the right questions and interpret...

Signals from the Cloud Security Forecast 2026: Cloud Risk Is Scaling through Design, Not Disruption

Key Takeaways Identity and permissions now determine what is reachable, making them the primary drivers of cloud risk. Runtime exposure, not individual findings, determines how low-risk issues combine into real impact. SaaS and OAuth integrations extend the control plane and amplify blast radius...

Compliance Won’t Save Healthcare: Reducing the Blast Radius Will

...

Microsegmentation and Zero Trust: Control the Blast Radius by Design

...

EUVD-2025-30252

Malicious code in bioql PyPI...

CVE-2025-34204

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments contains multiple Docker containers that run primary application processes for example PHP workers, Node.js servers and custom binaries as the root user. This increases the blast radius of a containe...

CVE-2025-34204

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments contains multiple Docker containers that run primary application processes for example PHP workers, Node.js servers and custom binaries as the root user. This increases the blast radius of a containe...

CVE-2025-34204 Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments contains multiple Docker containers that run primary application processes for example PHP workers, Node.js servers and custom binaries as the root user. This increases the blast radius of a containe...

CVE-2025-34204 Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments contains multiple Docker containers that run primary application processes for example PHP workers, Node.js servers and custom binaries as the root user. This increases the blast radius of a containe...

PT-2025-38602

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host and Application affected versions not specified Description The Vasion Print Virtual Appliance Host and Application VA and SaaS deployments utilizes Docker containers that execute prima...

Secrets Found. Owners Identified. Issues Fixed.

Wiz closes the loop on exposed secrets with blast radius context, ownership intelligence, and actionable, AI-powered fixes...

Blast-RADIUS is a vulnerability that affects the RADIUS protocol (CVE-2024-3596)

A vulnerability in the verification of RADIUS Response from a RADIUS server has been disclosed by a team of researchers from UC San Diego and their partners. An attacker, with access to the network where the RADIUS protocol is being transmitted, can spoof a UDP-based RADIUS Response packet to...

Unveiling the power of Wiz's Security Graph with automated blast radius and root cause analysis for cloud incident response

Wiz assists Incident Response IR and SOC teams with containment through automated assessment of security incidents by identifying possible root causes and calculating the potential blast radius of compromised resources...

Expanded Coverage and New Attack Path Visualizations Help Security Teams Prioritize Cloud Risk and Understand Blast Radius

Cloud environments differ in a number of ways from more traditional on-prem environments. From the immense scale and compounding complexity to the rate of change, the cloud creates a host of challenges for security teams to navigate and grapple with. By definition, anything running in the cloud h...

Uncover and Remediate Toxic Combinations with Attack Path Analysis

Particularly at enterprise scale, it’s not uncommon to have hundreds of thousands of resources running across your cloud environments at any given time. Of course, these resources aren’t running independently. In modern environments, these resources are all interconnected and in many cases...