AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI

This paper introduces the Agentic AI Governance Assurance & Trust Engine AAGATE, a Kubernetes-native control plane designed to address the unique security and governance challenges posed by autonomous, language-model-driven agents in production. Recognizing the limitations of traditional...

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware

The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality of two of its malware programs, indicating that the hacking group is actively refining its toolset. That's according to new findings from Cisco Talos, which said recent...

ExPrESSO: Zero-Knowledge Backed Extensive Privacy Preserving Single Sign-On

User authentication is one of the most important aspects for secure communication between services and end-users over the Internet. Service providers leverage Single-Sign On SSO to make it easier for their users to authenticate themselves. However, standardized systems for SSO, such as OIDC, do n...

EUVD-2019-7290

Malware in sbrugna...

EUVD-2019-7289

Malware in sbrugna...

EUVD-2020-0088

Malware in sbrugna...

EUVD-2023-48172

Malicious code in bioql PyPI...

EUVD-2022-0124

Malicious code in bioql PyPI...

EUVD-2024-39567

Malicious code in bioql PyPI...

EUVD-2024-42265

Malicious code in bioql PyPI...

EUVD-2023-48168

Malicious code in bioql PyPI...

EUVD-2023-53098

Malicious code in bioql PyPI...

EUVD-2024-0310

Malicious code in bioql PyPI...

EUVD-2023-1753

Malicious code in bioql PyPI...

EUVD-2022-6575

Malicious code in bioql PyPI...

Bridging Technical Capability and User Accessibility: Off-Grid Civilian Emergency Communication

During large-scale crises disrupting cellular and Internet infrastructure, civilians lack reliable methods for communication, aid coordination, and access to trustworthy information. This paper presents a unified emergency communication system integrating a low-power, long-range network with a...

Overcoming DNSSEC Islands of Security: a TLS and IP-Based Certificate Solution

The Domain Name System DNS serves as the backbone of the Internet, primarily translating domain names to IP addresses. Over time, various enhancements have been introduced to strengthen the integrity of DNS. Among these, DNSSEC stands out as a leading cryptographic solution. It protects against...

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

The North Korea-linked threat actor known as the Lazarus Group has been attributed to a social engineering campaign that distributes three different pieces of cross-platform malware called PondRAT, ThemeForestRAT, and RemotePE. The attack, observed by NCC Group's Fox-IT in 2024, targeted an...

The Aegis Protocol: a Foundational Security Framework for Autonomous AI Agents

The proliferation of autonomous AI agents marks a paradigm shift toward complex, emergent multi-agent systems. This transition introduces systemic security risks, including control-flow hijacking and cascading failures, that traditional cybersecurity paradigms are ill-equipped to address. This...

Fortifying the Agentic Web: a Unified Zero-Trust Architecture against Logic-Layer Threats

This paper presents a Unified Security Architecture that fortifies the Agentic Web through a Zero-Trust IAM framework. This architecture is built on a foundation of rich, verifiable agent identities using Decentralized Identifiers DIDs and Verifiable Credentials VCs, with discovery managed by a...