Engineering Risk-Aware, Security-By-Design Frameworks for Assurance of Large-Scale Autonomous AI Models

As AI models scale to billions of parameters and operate with increasing autonomy, ensuring their safe, reliable operation demands engineering-grade security and assurance frameworks. This paper presents an enterprise-level, risk-aware, security-by-design approach for large-scale autonomous AI...

LATENT: LLM-Augmented Trojan Insertion and Evaluation Framework for Analog Netlist Topologies

Analog and mixed-signal A/MS integrated circuits ICs are integral to safety-critical applications. However, the globalization and outsourcing of A/MS ICs to untrusted third-party foundries expose them to security threats, particularly analog Trojans. Unlike digital Trojans which have been...

Debian: Security Advisory (DLA-4155-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2025-0150)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-28073

creationtimestamp| type| source ---|---|--- 2025-05-08 21:15:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2utibf32 2025-05-08 22:32:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3cv7x2n 2025-05-09...

CVE-2025-46736

Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8.10 and 13.8.1. No known workarounds a...

CVE-2025-37807 bpf: Fix kmemleak warning for percpu hashmap

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kmemleak warning for percpu hashmap Vlad Poenaru reported the following kmemleak issue: unreferenced object 0x606fd7c44ac8 size 32: backtrace crc 0: pcpuallocnoprof+0x730/0xeb0 bpfmapallocpercpu+0x69/0xc0...

PT-2025-20336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the bpf Berkeley Packet Filter module. The issue arises due to the non-8-byte aligned storage of percpu...

Debian: Security Advisory (DLA-4154-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Defending against Indirect Prompt Injection by Instruction Detection

The integration of Large Language Models LLMs with external sources is becoming increasingly common, with Retrieval-Augmented Generation RAG being a prominent example. However, this integration introduces vulnerabilities of Indirect Prompt Injection IPI attacks, where hidden instructions embedded...

QUIC-Exfil: Exploiting QUIC'S Server Preferred Address Feature to Perform Data Exfiltration Attacks

The QUIC protocol is now widely adopted by major tech companies and accounts for a significant fraction of today's Internet traffic. QUIC's multiplexing capabilities, encrypted headers, dynamic IP address changes, and encrypted parameter negotiations make the protocol not only more efficient,...

Ubuntu: Security Advisory (USN-7502-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7499-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-41431

creationtimestamp| type| source ---|---|--- 2025-05-07 22:22:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15442 2025-05-07 23:30:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcx24jxk2 2025-05-08 00:27:21+00:00| seen|...

CVE-2025-47462

creationtimestamp| type| source ---|---|--- 2025-05-07 21:39:09+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lomec4lyv72q...

virt:rhel and virt-devel:rhel security update

An update is available for module.libvirt-dbus, swtpm, module.nbdkit, netcf, module.libiscsi, virt-v2v, libguestfs, module.virt-v2v, perl-Sys-Virt, module.supermin, sgabios, libvirt-dbus, module.netcf, libnbd, module.seabios, module.libvirt-python, hivex, seabios, module.sgabios,...

CVE-2025-47669

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15366 2025-05-07 18:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkdwuiu2r 2025-05-07 19:00:51+00:00| seen|...

CVE-2025-47665

creationtimestamp| type| source ---|---|--- 2025-05-07 18:22:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15363 2025-05-07 18:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lolzkehz5l2w...

MAL-2025-3689 Malicious code in internal-lib-t1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0656cbf9afeeae51e03fe153910e1dad3a3840f219effb0583665acdfefb34ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-32397

creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15278 2025-05-07 08:26:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokxykzgxm2w 2025-05-07 09:32:04+00:00| published-proof-of-concept|...