Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netsched: ets: A double addition of the classifier was corrected in the class where netem is a child qdisc. As described in Gerrard’s report 1, there are use cases where a netem child qdisc can make the enqueue callback of the...

FLock.io Unveils Edge Decision Model, Built on Qwen, for Enhanced Data Privacy

Built on Qwen3.5-2B, the System One model executes sub-31ms local inference, allowing enterprises to run automated classifications quickly, at low cost and completely offline without transmitting sensitive data to third-party cloud servers...

CVE-2026-90248

A flaw was found in the Linux kernel's network scheduler component net/sched: clsapi. A race condition exists in the tcnewtfilter function during the insertion of a new protocol. If a process loses a race to insert a protocol, its error handling path may incorrectly remove an active network...

eyeballer

Eyeballer Échale un vistazo rápido a esas capturas de pantalla. Eyeballer está diseñado para pruebas de penetración de red de gran alcance donde necesitas encontrar objetivos "interesantes" de un gran conjunto de hosts basados en web. Utiliza tu herramienta de captura de pantalla favorita como...

recox

Recox v2.0 RecoX es una herramienta increíblemente versátil y potente, diseñada específicamente para ayudar en la identificación y clasificación de vulnerabilidades en aplicaciones web. El script es capaz de detectar vulnerabilidades que no suelen estar incluidas en la lista de las diez...

yara

!IMPORTANT Este proyecto está en modo de mantenimiento. Más información: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA en pocas palabras YARA es una herramienta destinada aunque no limitada a ayudar a los investigadores de malware a identificar y clasificar muestras de malware...

batea

Batea Una batea es una bandeja grande y poco profunda de madera o hierro utilizada tradicionalmente por los buscadores de oro para lavar arena y grava y recuperar pepitas de oro. Batea es un marco de clasificación de dispositivos de red basado en contexto que utiliza la familia de algoritmos de...

twebit

Análisis de Bitcoin con aprendizaje automático ¿Cómo funciona? 1- Obtener tweets de Twitter 2- Filtrar tweets 3- Clasificación de tweets con algoritmo Naive Bayes Positivo, negativo y neutro Instalación git clone https://github.com/omergunal/twebit cd twebit pip3 install -r requirements.txt...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark es el analizador de tráfico de red más utilizado. Es una herramienta importante tanto para el análisis de tráfico en vivo como para el análisis forense por parte de analistas de malware/forenses. Aunque Wireshark proporciona funcionalidades increíblemente...

inhale

Inhale - Malware Inhaler Inhale es una herramienta de análisis y clasificación de malware capaz de automatizar y escalar muchas operaciones de análisis estático. Esta es la versión beta, destinada a pruebas, retroalimentación y desarrollo comunitario. Antecedentes Inhale comenzó como una serie de...

decode-spam-headers

decode-spam-headers.py Che tu stia cercando di capire perché una specifica e-mail è finita in SPAM/Junk per le tue attività amministrative quotidiane o per i tuoi scopi di simulazione di Phishing Red-Team, questo script è qui per aiutarti! L'idea è nata durante la consegna di esercizi commerciali...

CVE-2026-92543

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

trufflehog v3.98.0

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs

Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...

A Hybrid Approach to Malware Detection: Integrating Few-Shot Model-Agnostic Meta-Learning with Autoencoders

Ransomware has emerged as a major cybersecurity threat, with incidents increasing in frequency and impact across critical sectors. These attacks are typically launched through phishing emails, malicious downloads, or exploitation of software vulnerabilities to gain system access. Once inside, the...

A Structured State Space Sequence Model for Multi-Class Classification of Malware

By 2030, Internet of Things IoT devices are projected to reach 40 billion, with fast-paced technological advancements in fields such as industry, healthcare, agriculture, automobiles, and building/home automation systems. This expansion has created a large attack surface for cybercrime, as the...

SUSE CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

Behavior-Centric Malware Classification with Fine-Grained Malicious Logic Localization

Effective malware analysis requires understanding not only whether a program is malicious, but also which behaviors it exhibits and where those behaviors originate in the code. Existing machine-learning-based malware detectors largely operate as black boxes, providing limited insight into the...

Quantum Computing for Network Security Classification: Near-Term Classification and Long-Term Memory Efficiency

Quantum computing has already been explored in several network-security applications. However, how quantum computing may contribute to network-security classification in both the near term and the longer term has not been systematically discussed. This paper studies this question through two...

JEV As a Judge for Agent Trace Security: An Empirical Comparison with Generative LLM Judges

Security evaluation of tool-using agents requires judging actions in context, yet generative judges add latency, explanation overhead, and output-validation failures. We study whether JEV, a typed decision model, offers a useful alternative for retrospective trace classification. We evaluate JEV...