osint_toolkit

OSINT Toolkit تحذير OSINT Toolkit ليست جاهزة للإنتاج بعد. هذه نسخة أولية مبكرة لا تزال بحاجة إلى بعض العمل. تطبيق ويب كامل التقنيات مبني لمحللي الأمن OSINT Toolkit هي منصة تحليل عند الطلب قابلة للاستضافة الذاتية، مصممة لمتخصصي الأمن. تقوم بتجميع أدوات أمنية متنوعة في بيئة واحدة سهلة الاستخدام، مم...

PyRIT

Outil Python d'identification des risques pour l'IA générative PyRIT L'outil Python d'identification des risques pour l'IA générative PyRIT est un framework open source conçu pour permettre aux professionnels de la sécurité et aux ingénieurs d'identifier de manière proactive les risques dans les...

offensive-ai-compilation

Compilation d'IA offensive Une liste organisée de ressources utiles couvrant l'IA offensive. 📁 Sommaire 📁 🚫 Abus 🚫 🧠 Apprentissage contradictoire 🧠 ⚡ Attaques ⚡ 🔒 Extraction 🔒 ⚠️ Limitations ⚠️ 🛡️ Actions défensives 🛡️ 🔗 Liens utiles 🔗 ⬅️ Inversion ou inférence ⬅️ 🛡️ Actions défensives 🛡️ 🔗 Liens...

PurpleLlama

🤗 Modèles sur Hugging Face | Blog | Site web | Article CyberSec Eval | Article Llama Guard Purple Llama Purple Llama est un projet parapluie qui, au fil du temps, réunira des outils et des évaluations pour aider la communauté à développer de manière responsable avec des modèles d'IA générative...

Stevos-AI-Blocklist

قائمة حظر الذكاء الاصطناعي لـ Stevo قائمة تصفية لـ uBlock Origin و AdGuard تخفي ميزات مواقع ويب محددة تستخدم الذكاء الاصطناعي التوليدي والمحتوى الموصوف بأنه منشأ بواسطة الذكاء الاصطناعي. متوفرة لأجهزة PC/Linux Firefox، Edge، Chrome، Brave، macOS Firefox، Edge، Chrome، Safari، Android Firefox، و...

PyRIT

أداة تحديد المخاطر البايثونية للذكاء الاصطناعي التوليدي PyRIT أداة تحديد المخاطر البايثونية للذكاء الاصطناعي التوليدي PyRIT هي إطار عمل مفتوح المصدر صُمم لتمكين المتخصصين في الأمن والمهندسين من تحديد المخاطر في أنظمة الذكاء الاصطناعي التوليدي بشكل استباقي. !WARNING تم نقل PyRIT! يُرجى زيارة...

AI-Red-Teaming-Playground-Labs

Лаборатории AI Red Teaming Playground Этот репозиторий содержит задания для лабораторных работ, используемых в курсе «AI Red Teaming на практике». Курс первоначально преподавался на Black Hat USA 2024 д-ром Амандой Миннич и Гэри Лопесом. Мартен Пулио занимался инфраструктурой и оценкой заданий...

Why Generative AI Needs a New Kind of Security

This is Post 2 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of ...

EUVD-2026-39790

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.91.0, the METS-GBS backend's XML parsing and the input document format detection lacked security controls. An attacker could craft malicious METS-GBS...

GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026

This year’s Pwn2Own competition in Berlin revealed just how much of the AI stack remains exposed -- and the gap between what these tools promise and what they can withstand point to the fragile security foundations underneath...

Context-Aware Spear Phishing: Generative AI-Enabled Attacks against Individuals Via Public Social Media Data

We demonstrate how publicly available social-media data and generative AI GenAI can be misused to automate and scale highly personalized, context-aware spear-phishing campaigns. With minimal attacker effort, a small amount of public activity per target is sufficient for GenAI models to extract...

What Security and Privacy Transparency Users Need from Consumer-Facing Generative AI

Users increasingly rely on consumer-facing generative AI GenAI for tasks ranging from everyday needs to sensitive use cases. Yet, it remains unclear whether and how existing security and privacy S&P communications in GenAI tools shape users' adoption decisions and subsequent experiences...

Understanding User Privacy Perceptions of GenAI Smartphones

GenAI smartphones, which natively embed generative AI at the system level, are transforming mobile interactions by automating a wide range of tasks and executing UI actions on behalf of users. Their superior capabilities rely on continuous access to sensitive and context-rich data, raising privac...

griptape 路径遍历漏洞

Griptape is an open-source generative AI application development framework created by Griptape. Version 0.19.4 of Griptape contains a path traversal vulnerability, which stems from incorrect handling of the parameter filename, potentially leading to path traversal attacks...

Observability for AI Systems: Strengthening visibility for proactive risk detection

Adoption of Generative AI GenAI and agentic AI has accelerated from experimentation into real enterprise deployments. What began with copilots and chat interfaces has quickly evolved into powerful business systems that autonomously interact with sensitive data, call external APIs, connect to...

This Week in Spring - March 17th, 2026

Hi, Spring fans! Welcome to another rip-roaring installment of This Week in Spring , which I'm posting ahead of my keynote at the amazing JavaOne 2026 event here in sunny San Francisco, California! I love Piotr's latest post on using local AI models with LM Studio and Spring AI Did you see the ne...

Security Considerations for Multi-Agent Systems

Multi-agent artificial intelligence systems or MAS are systems of autonomous agents that exercise delegated tool authority, share persistent memory, and coordinate via inter-agent communication. MAS introduces qualitatively distinct security vulnerabilities from those documented for singular AI...

Cybersecurity AI: Hacking Consumer Robots in the AI Era

Is robot cybersecurity broken by AI? Consumer robots -- from autonomous lawnmowers to powered exoskeletons and window cleaners -- are rapidly entering homes and workplaces, yet their security remains rooted in assumptions of specialized attacker expertise. This paper presents evidence that...

EUVD-2026-9988

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/local host checks existed, missing...

PT-2026-23642

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, some endpoints returned raw exception strings to clients. Additionally, login token material was exposed in UI/rendered responses and token rotation output. This...