Behavioral Analytics for Continuous Insider Threat Detection in Zero-Trust Architectures

Insider threats are a particularly tricky cybersecurity issue, especially in zero-trust architectures ZTA where implicit trust is removed. Although the rule of thumb is never trust, always verify, attackers can still use legitimate credentials and impersonate the standard user activity. In...

PT-2026-8212

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the networking scheduler cls u32 where the skb header pointer function does not fully validate negative offset values. This can lead to...

CVE-2025-13708 Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent NeuralNLP-NeuralClassifier loadcheckpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent NeuralNLP-NeuralClassifier. User interaction is required to exploit th...

LLM-Based Vulnerable Code Augmentation: Generate or Refactor?

Vulnerability code-bases often suffer from severe imbalance, limiting the effectiveness of Deep Learning-based vulnerability classifiers. Data Augmentation could help solve this by mitigating the scarcity of under-represented CWEs. In this context, we investigate LLM-based augmentation for...

Improving the Identification of Real-World Malware's DNS Covert Channels Using Locality Sensitive Hashing

Nowadays, malware increasingly uses DNS-based covert channels in order to evade detection and maintain stealthy communication with its command-and-control servers. While prior work has focused on detecting such activity, identifying specific malware families and their behaviors from captured...

Synthetic Data: AI'S New Weapon against Android Malware

The ever-increasing number of Android devices and the accelerated evolution of malware, reaching over 35 million samples by 2024, highlight the critical importance of effective detection methods. Attackers are now using Artificial Intelligence to create sophisticated malware variations that can...

Siemens SIMATIC and SCALANCE Use After Free (CVE-2023-4128)

A use-after-free vulnerability in net/sched/clsfw.c in classifiers clsfw, clsu32, and clsroute in the Linux Kernel allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak. This plugin only works with...

Malicious code in form-classifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...

EUVD-2025-175355

Malicious code in form-classifier npm...

MAL-2025-190491 Malicious code in form-classifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...

BLADE: Behavior-Level Anomaly Detection Using Network Traffic in Web Services

With their widespread popularity, web services have become the main targets of various cyberattacks. Existing traffic anomaly detection approaches focus on flow-level attacks, yet fail to recognize behavior-level attacks, which appear benign in individual flows but reveal malicious purpose using...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: dbmate, mockery, glow, local-path-provisioner, rekor, neuvector-dbgen, wuzz, sealed-secrets, php-fpmexporter, helm-push, q, supercronic, wire-go, ko, kube-vip-cloud-provider, pguser, smarter-device-manager, go-bindata, bazelisk, mongo-tools, k3d, k6, terraform-docs,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: podinfo, maru, dbmate, dockerize, chartmuseum, gke-gcloud-auth-plugin, azure-ipam, kustomize, falcoctl, chisel, mockery, kpt, kubernetes-csi-livenessprobe, cluster-api-provider-vsphere, glow, conjur-cli, velero, capslock, rancher-helm, aws-signer-notation-plugin,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, kubebuilder, influxd, xcaddy, local-path-provisioner-fips, cloud-sql-proxy, stern, spark-operator-fips, cri-tools, yunikorn-web-fips, lazydocker, kubevela, kube-oidc-proxy, render-template, knative-eventing, pulumi-kubernetes-operator,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, kubebuilder, influxd, xcaddy, local-path-provisioner-fips, cloud-sql-proxy, stern, spark-operator-fips, cri-tools, yunikorn-web-fips, lazydocker, kubevela, kube-oidc-proxy, render-template, knative-eventing, pulumi-kubernetes-operator,...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2023-42755)

A flaw was found in the IPv4 Resource Reservation Protocol RSVP classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the rsvpclassify function. This issue may allow a local user to crash the system and cause a denial of...

CVE-2023-53733

In the Linux kernel, the following vulnerability has been resolved: net: sched: clsu32: Undo tcfbindfilter if u32replacehwknode When u32replacehwknode fails, we need to undo the tcfbindfilter operation done at u32setparms...

Attack-Specialized Deep Learning with Ensemble Fusion for Network Anomaly Detection

The growing scale and sophistication of cyberattacks pose critical challenges to network security, particularly in detecting diverse intrusion types within imbalanced datasets. Traditional intrusion detection systems IDS often struggle to maintain high accuracy across both frequent and rare...

ensemble_classifer() function in the Code Execution

The vulnerability of the ensembleclassifer function in the library for training large language models with NVIDIA Megatron-LM exists due to improper code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain elevated privileges, and expose sensitive...

A Multi-Layered Embedded Intrusion Detection Framework for Programmable Logic Controllers

Industrial control system ICS operations use trusted endpoints like human machine interfaces HMIs and workstations to relay commands to programmable logic controllers PLCs. Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk...