Cisa-KEV-Threat-Intel-Orchestrator

CISA KEV 威胁情报编排器 零接触管道，每周自动将CISA已知被利用漏洞（KEV）目录中新增的武器化CVE转化为可用于生产的Sigma检测规则。 问题 手动将新的KEV条目转化为可用的检测是缓慢的：查看公告、研究攻击模式、编写Sigma规则、测试、向团队简报。每个CVE大约需要4-6小时。一周十个新条目就是一整周的工作量，而大多数SOC并没有每周一闲置一个分析师周的时间。 功能 每周一上午8:00，管道执行以下操作： 1. 拉取实时CISA KEV目录 并隔离自上次运行以来新增的武器化CVE。 2. 使用Google Gemini为每个CVE生成Sigma检测规则...

SuperDiagnosticTool

超级诊断工具 AI 驱动的 Windows 诊断与自我修复工具 SuperDiagnosticTool 是一款智能系统诊断工具，它将实时硬件遥测与 Google Gemini AI 相结合，用于分析、诊断并自动修复 Windows 系统问题。采用安全优先架构，可为任何 Windows 配置提供生产级诊断能力。 截图 主界面，显示扫描模式选择与问题描述输入 主要特性 通用硬件支持 动态伸缩： 自动适配任何 CPU 配置（1-128+ 核） 硬件无关逻辑： 在老旧系统（Intel Pentium）到高端工作站（AMD Threadripper、Intel Xeon）上均可无缝工作 优雅降级：...

standalone_tdo

Extractor Independiente TDO Una herramienta de línea de comandos potente e independiente para extraer Inteligencia de Amenazas Cibernéticas CTI de documentos mediante Modelos de Lenguaje de Gran Tamaño con capacidades avanzadas de salida estructurada. 🚀 Características Soporte de documentos...

phantomrecon

PhantomRecon PhantomRecon es una herramienta CLI de automatización de red team, modular y basada en agentes, diseñada para demostrar flujos de trabajo autónomos de seguridad ofensiva impulsados por IA Google Gemini mediante Agent Development Kit - ADK. Inicio rápido CLI Ejecutar consola interacti...

Security Bulletin: Multiple Vulnerabilities in IBM Bob

Summary Multiple vulnerabilities were addressed in IBM Bob V 2.1.0 Vulnerability Details CVEID:CVE-2026-12537 DESCRIPTION: Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.2...

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

Google's Gemini model has become the latest artificial intelligence AI system to access the internet and break into other companies during a cybersecurity evaluation. The development was first reported by The Wall Street Journal. The incidents occurred in May 2026 as part of a test run conducted ...

PT-2026-66872

Name of the Vulnerable Software and Affected Versions gemini-bridge versions 1.0.0 through 1.3.0 Description The consult gemini with files function in inline mode allows an arbitrary local file read. When the mode is set to "inline", the server reads any file path provided in the files argument...

CVE-2026-44187 Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...

CVE-2026-44187 Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...

CVE-2026-44187

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...

PT-2026-63362

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

A solo Russian-speaking threat actor known as "bandcampro " outsourced a chunk of their operations to Google's open-source Gemini CLI artificial intelligence AI and commandeered a live botnet. The findings come from an analysis of 200 Gemini CLI session logs between March 19 and April 21, 2026,...

CVE-2026-12537: Improper Input Validation

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI versions prior to 0.39.1 and run-gemini-cli GitHub Action versions prior to 0.1.22 on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously...

Malicious code in @mastra/voice-google-gemini-live (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7292d326aee198d9a062ea2ac2675a0c48058faacb97aee1b862c8605b9a0658 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini's voice assistant on Android and made it open a victim's connected windows, fake a message from their boss, push the phone into a Zoom call, or quietly poison its long-term...

Malicious code in edison-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c151a181047e12f1de0e91b1923861446b04558028d518e30df1767ccc85def7 At pip install time, setup.py reads the EDISONQUERY environment variable from the installer's environment and POSTs it to...

MAL-2026-4747 Malicious code in edison-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c151a181047e12f1de0e91b1923861446b04558028d518e30df1767ccc85def7 At pip install time, setup.py reads the EDISONQUERY environment variable from the installer's environment and POSTs it to...

Malicious code in glass-of-water (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df79336313f71fac8158ff6f3e0160d0e99a8d1d84c452505fd3739af5838a69 glassofwater/init.py embeds 10 Google Gemini API keys AIzaSy... split across 5-part dictionaries and reassembled at runtime by getapikey L6-19. The...

MAL-2026-4751 Malicious code in glass-of-water (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df79336313f71fac8158ff6f3e0160d0e99a8d1d84c452505fd3739af5838a69 glassofwater/init.py embeds 10 Google Gemini API keys AIzaSy... split across 5-part dictionaries and reassembled at runtime by getapikey L6-19. The...

How to Disable Google's Gemini in Chrome

Chrome users were caught off guard by a 4-GB Google AI model baked into Chrome, sparking privacy concerns. The good news: You can easily uninstall it. The bad? You might not want to...