Odysseus: Jailbreaking Commercial Multimodal LLM-Integrated Systems Via Dual Steganography

By integrating language understanding with perceptual modalities such as images, multimodal large language models MLLMs constitute a critical substrate for modern AI systems, particularly intelligent agents operating in open and interactive environments. However, their increasing accessibility al...

PHANTOM: Progressive High-Fidelity Adversarial Network for Threat Object Modeling

The scarcity of cyberattack data hinders the development of robust intrusion detection systems. This paper introduces PHANTOM, a novel adversarial variational framework for generating high-fidelity synthetic attack data. Its innovations include progressive training, a dual-path VAE-GAN...

RHEL 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2025:23070)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23070 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

📄 Microsoft Windows 11 build 10.0.22631.6199 Dual-Path Privilege Escalation

Proof of concept exploit for a Microsoft Windows 11 build 10.0.22631.6199 dual-path elevation of privilege vulnerability in undocumented RPC and debugging objects...

HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal

The availability of high-quality, AI-generated audio raises security challenges such as misinformation campaigns and voice-cloning fraud. A key defense against the misuse of AI-generated audio is by watermarking it, so that it can be easily distinguished from genuine audio. As those seeking to...

TOTOLINK LR1200GB Command Injection Vulnerability

The TOTOLINK LR1200GB is a wireless dual-band 4GLTE router from China's TOTOLINK Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks. The TOTOLINK LR1200GB suffers from a command injection vulnerability that stems from the cstecgi.cgi binary file failing to properly filter...

DualTAP: A Dual-Task Adversarial Protector for Mobile MLLM Agents

The reliance of mobile GUI agents on Multimodal Large Language Models MLLMs introduces a severe privacy vulnerability: screenshots containing Personally Identifiable Information PII are often sent to untrusted, third-party routers. These routers can exploit their own MLLMs to mine this data,...

Adaptive Dual-Layer Web Application Firewall (ADL-WAF) Leveraging Machine Learning for Enhanced Anomaly and Threat Detection

Web Application Firewalls are crucial for protecting web applications against a wide range of cyber threats. Traditional Web Application Firewalls often struggle to effectively distinguish between malicious and legitimate traffic, leading to limited efficacy in threat detection. To overcome these...

EUVD-2025-99611

Malicious code in dualaardwolfz3n npm...

MAL-2025-113494 Malicious code in dual_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f6bc06f31ceedfe4012dc041a8ede1293cc32f15ff9b03a9e1ff4108bd0a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f6bc06f31ceedfe4012dc041a8ede1293cc32f15ff9b03a9e1ff4108bd0a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_emu-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35df5493c468eea3f457f7d140c222cbb48966cabca6bf30768b663e3230826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df16da71849c5fe7643cc4e8a8cbfcacd8bd1825023df645a2cd2c5f39a4a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cbb02cc4e4f0a730e44e3a908c8222a9904abf9f47003f388fba107aecc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54764

Malicious code in dual-azure-ostrich npm...

EUVD-2025-54762

Malicious code in dual-olive-cougar npm...

Malicious code in dual-olive-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc5601580a5baf1be4b7027a94a748da9bfd5c788033fe8be17a9c95cc077ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54761

Malicious code in dual-sapphire-herring npm...

EUVD-2025-54760

Malicious code in dual-violet-anglerfish npm...

MAL-2025-67885 Malicious code in dual-azure-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e954471ac09e4b143726c20a2a363847685b2198f26393fae4d98334bf0efaae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...