69 matches found
kprotect
🛡️ kprotect 개요 kprotect는 공급망 공격예: 악성 Python 또는 Node.js 라이브러리으로부터 민감한 데이터를 보호하도록 설계된 커널 수준 보안 엔진입니다. 가장 민감한 파일을 위한 독립적인 보안 계층 역할을 합니다. eBPF-LSM 시행 : 경로 패턴 및 와일드카드예: .env, home/user/.ssh/를 기반으로 커널 수준에서 파일 접근을 차단합니다. 계보 검증Lineage Verification : 단일 바이너리만 확인하는 것이 아니라 프로세스 체인 자체를 검증합니다. ✅ VS Code →...
dd
dd macOS에서 Linux 컨테이너 실행 — VM 없이. dd란 무엇인가? dd는 가상 머신 없이 Apple Silicon macOS에서 Linux 컨테이너를 기본적으로 실행 합니다. 밑에는 Linux 커널과 하이퍼바이저가 없습니다. JIT 가 컨테이너의 코드를 변환하고 Linux 시스템 콜을 사용자 공간에서 처리 합니다 gVisor / PRoot 계열. JIT 자체가 게스트의 Linux 커널입니다 — 네임스페이스, cgroups, 오버레이 이미지 레이어 및 네트워킹이 사용자 공간 상태로 유지됩니다. Docker Engin...
CVE-2026-69146
A flaw was found in MLflow, an open-source AI engineering platform. An authenticated user could bypass authorization controls by sending requests to the LogInputs endpoint for another user's data. This allowed the user to inject unauthorized data records into the dataset lineage metadata, leading...
PT-2026-79963
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE REQUEST HANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inpu...
CVE-2026-69146
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...
CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...
EUVD-2026-60475
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...
CVE-2026-47704 TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session
TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware was first...
Security update for xar (moderate)
openSUSE security update: security update for xar ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21153-1 Rating: moderate References: bsc1047874 bsc1047875 bsc1108595 bsc1108596 Cross-References: CVE-2017-11124 CVE-2017-11125 CVE-2018-17093...
OPENSUSE-SU-2026:21153-1 Security update for xar
This update for xar fixes the following issues: Changes in xar: - Switch to the maintained Apple xar lineage build 503, versioned 1.8.0.0.503: the mackyle 1.6.1 fork this package tracked has been dead since 2012, and Debian, Fedora and Gentoo all moved to Apple's xar apple-oss-distributions/xar...
MalTree: Tracing Malware Evolution from Embeddings at Scale
Malware detection remains largely reactive: machine learning models trained on known samples degrade as threats evolve. Understanding evolutionary relationships among malware families can inform proactive defense, but traditional reverse engineering can take months to years to uncover such lineag...
dbtr (>=0.3.0, <=0.3.6), dbtr-lt (0.3.5) +1 more potentially affected by unknown CVE via elementary-data (>=0.15.1, <=0.25.1)
elementary-data PYPI version =0.15.1, =0.3.0, =0.1.2, =0.1.4 Source cves: unknown CVE Source advisory: SNYK:PYTHON-ELEMENTARYDATA-16316110...
Bad Apples: Weaponizing native macOS primitives for movement and execution
As macOS adoption grows among developers and DevOps, it has become a high value target; however, native "living-off-the-land" LOTL techniques for the platform remain significantly under-documented compared to Windows. Adversaries can bypass security controls by repurposing native features like...
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shar...
Security Bulletin: MANTA Automated Data Lineage for IBM Cloud Pak for Data is vulnerable to Critical Security Vulnerability in React Server Components CVE-2025-55182
Summary MANTA Automated Data Lineage for IBM Cloud Pak for Data is affected by React Server Components CVE-2025-55182. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1...
Friday Squid Blogging: Vampire Squid Genome
The vampire squid Vampyroteuthis infernalis has the largest cephalopod genome ever sequenced: more than 11 billion base pairs. That's more than twice as large as the biggest squid genomes. It's technically not a squid: "The vampire squid is a fascinating twig tenaciously hanging onto the cephalop...
EUVD-2021-0015
Malware in sbrugna...