AgentWard

AgentWard · 玄甲OS AgentWard 玄甲은 신뢰할 수 있고 확장 가능한 AI 에이전트 배포를 위해 설계된 풀스택 보안 운영 체제로, OpenClaw에 대한 네이티브 코드 적응을 제공합니다. AgentWard는 에이전트 온보딩, 안전한 추론 및 신뢰 실행을 하나의 통합된 보안 아키텍처로 통합하며, 다른 주요 메인스트림 에이전트 프레임워크에 대한 네이티브 지원을 곧 제공할 예정입니다. 이기종 심층 방어Defense-in-Depth 설계는 에이전트 워크플로우를 시작, 인식, 메모리, 의사 결정 및 실행이라는 5가지 조정...

fence

Fence는 명령어를 샌드박스로 감싸 기본적으로 네트워크 액세스를 차단하고 설정 가능한 규칙을 기반으로 파일 시스템 작업을 제한합니다. 반신뢰 코드패키지 설치, 빌드 스크립트, CI 작업, 익숙하지 않은 저장소를 제어된 부작용으로 실행할 때 가장 유용하며, 심층 방어로서 AI 코딩 에이전트를 보완할 수도 있습니다. 모든 네트워크 액세스 차단 기본값 fence curl https://example.com → 403 Forbidden 특정 도메인 허용 fence -t code npm install → npm/pypi 등이 허용된...

bug-bounty-findings-o-research-disclosures.

bug-bounty-findings-o-research-disclosures. 버그 바운티: 'gau' 및 'Nuclei'를 통해 타사 지원 구성 요소에서 CVE-2023-50839 IDOR이 식별되었습니다. 경계 리디렉션에도 불구하고 오래된 소프트웨어는 여전히 노출된 상태로 남아 있었습니다. 수동 헤더 분석을 통해 확인되었습니다. 심각도: 5.3 중간. 심층 방어 실패 및 PII 보호에 중점을 두었습니다. 상태: Intigriti에 보고됨...

pmg

Package Manager Guard PMG Block malicious packages before they install. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody reviews. Recent compromises in popular ecosystems: Mini Shai-Hulud - 300+...

AZL-103850 CVE-2026-93228 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

DEBIAN-CVE-2026-93228

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

UBUNTU-CVE-2026-93228

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

EUVD-2026-86233

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

CVE-2026-93228 svcrdma: Reject Write/Reply chunks with segcount 0

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

CVE-2026-93228

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

CVE-2026-93067: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: sizet size = mintsizet, DPAUXMAXPAYLOADBYTES - 1, msg-size; After the transfer it replaces size with the...

GHSA-2XMM-M4WV-3FJH October CMS: Incomplete Scheme Validation in Image Resizer

The image resizer classified external sources by testing whether the source string began with the substring http, and the string-source branch in ResizeImageItem::fromObject accepted any value containing :// as a URL. As a result, non-https PHP stream wrappers such as phar://, file:// and ftp://...

CVE-2026-87065

A flaw was found in konflux-operator-tasks. Tekton task steps within this component run with root privileges without sufficient security hardening. This lack of defense-in-depth controls, such as restricted capabilities or disabled privilege escalation, could potentially allow an attacker to...

PT-2026-85076

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and were not validated when the configuration was saved. As a result, an authenticated user able to modify dashboard widg...

pmg v0.27.0

Package Manager Guard PMG Block malicious packages before they install. Why PMG? Developers and AI coding agents install packages every day. Each npm install or pip install executes thousands of lines of code that nobody reviews. Recent compromises in popular ecosystems: Mini Shai-Hulud - 300+...

CVE-2026-55165 Lemur : JWT verifier trusts attacker-supplied alg from token header — defense-in-depth gap; chain-dependent ATO with secret disclosure

Lemur manages TLS certificate creation. Prior to 1.9.2, the JWT verifier in lemur/auth/service.py:130-137 used fetchtokenheader to read headerdata"alg" from an unverified token and passed that attacker-controlled value to decodewithmultiplesecrets. PyJWT 2.x rejects alg=none with the configured...

ANT-2026-66X46XSC · supabase/supabase · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-66X46XSC: X-Content-Type-Options header set to invalid value The Next.js headers configuration for the Supabase...

CVE-2026-66883 Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidccplug Oidcc.Plug.Authorize module renders the user agent session binding inert, removing a defense in depth control against replay of a stolen session. This vulnerability is associated with program files...

EUVD-2026-52658

Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidccplug Oidcc.Plug.Authorize module renders the user agent session binding inert, removing a defense in depth control against replay of a stolen session. This vulnerability is associated with program files...

Acrisure KARR BT and DR-100

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to perform unauthorized vehicle control operations. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure...