Lucene search
+L

3526 matches found

The Hacker News
The Hacker News
added 2025/09/09 10:37 a.m.8 views

[Webinar] Shadow AI Agents Multiply Fast — Learn How to Detect and Control Them

⚠️ One click is all it takes. An engineer spins up an "experimental" AI Agent to test a workflow. A business unit connects to automate reporting. A cloud platform quietly enables a new agent behind the scenes. Individually, they look harmless. But together, they form an invisible swarm of Shadow A...

6.8AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/09/09 7:0 a.m.14 views

Description of the security update for PowerPoint 2016: September 09, 2025 (KB5002779)

None None...

7.8CVSS7AI score0.00558EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/09/09 12:0 a.m.8 views

Core Spring Resilience Features: @ConcurrencyLimit, @Retryable, and RetryTemplate

This is the first blog post in the Road to GA series, highlighting major features within the Spring portfolio for the next major versions to be released in November of this year. Today we are proud to announce the new resilience features coming in Spring Framework 7.0: concurrency throttling and...

7.1AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2025/09/05 12:0 a.m.15 views

Security update for python-Django (important)

openSUSE Security Update: Security update for python-Django Announcement ID: openSUSE-SU-2025:0335-1 Rating: important References: 1248810 Cross-References: CVE-2025-57833 CVSS scores: CVE-2025-57833 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...

8.1CVSS8.1AI score0.15656EPSS
SaveExploits4References1
Packet Storm News
Packet Storm News
added 2025/09/05 12:0 a.m.9 views

What Is Cybersecurity in Space?

Satellites, drones, and 5G space links now support critical services such as air traffic, finance, and weather. Yet most were not built to resist modern cyber threats. Ground stations can be breached, GPS jammed, and supply chains compromised, while no shared list of vulnerabilities or safe testi...

7.1AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 3:53 a.m.4 views

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

...

9.8CVSS7AI score0.01952EPSS
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/09/04 12:0 a.m.5 views

Quantum AI Algorithm Development for Enhanced Cybersecurity: a Hybrid Approach to Malware Detection

This study explores the application of quantum machine learning QML algorithms to enhance cybersecurity threat detection, particularly in the classification of malware and intrusion detection within high-dimensional datasets. Classical machine learning approaches encounter limitations when dealin...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/09/04 12:0 a.m.8 views

False Sense of Security: Why Probing-Based Malicious Input Detection Fails to Generalize

Large Language Models LLMs can comply with harmful instructions, raising serious safety concerns despite their impressive capabilities. Recent work has leveraged probing-based approaches to study the separability of malicious and benign inputs in LLMs' internal representations, and researchers ha...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/09/04 12:0 a.m.9 views

Between a Rock and a Hard Place: Exploiting Ethical Reasoning to Jailbreak LLMs

Large language models LLMs have undergone safety alignment efforts to mitigate harmful outputs. However, as LLMs become more sophisticated in reasoning, their intelligence may introduce new security risks. While traditional jailbreak attacks relied on singlestep attacks, multi-turn jailbreak...

7.4AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/09/01 12:0 a.m.8 views

E-PhishGen: Unlocking Novel Research in Phishing Email Detection

Every day, our inboxes are flooded with unsolicited emails, ranging between annoying spam to more subtle phishing scams. Unfortunately, despite abundant prior efforts proposing solutions achieving near-perfect accuracy, the reality is that countering malicious emails still remains an unsolved...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-17521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was...

5.5CVSS6.7AI score0.0105EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-3405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml...

6.5CVSS6.6AI score0.01737EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/29 6:28 a.m.7 views

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-security-core-6.4.5.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of spring-security-core-6.4.5.jar Vulnerability Details CVEID:CVE-2025-41232 DESCRIPTION: Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass...

9.1CVSS6.5AI score0.00535EPSS
SaveExploits0Affected Software1
SUSE Linux
SUSE Linux
added 2025/08/27 12:3 p.m.9 views

Security update for the Linux Kernel

This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE update use the SUSE...

8.7CVSS8.6AI score0.03133EPSS
SaveExploits11References1016
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-10913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the overrid...

9.8CVSS7.8AI score0.01854EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/26 10:33 p.m.4 views

GHSA-VJ54-72F3-P5JV devalue prototype pollution vulnerability

devalue.parse allows proto to be set A string passed to devalue.parse could represent an object with a proto property, which would assign a prototype to an object while allowing properties to be overwritten: js class Vector constructorx, y this.x = x; this.y = y; get magnitude return this.x 2 +...

7.9CVSS6.9AI score0.00369EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/08/26 10:33 p.m.16 views

devalue prototype pollution vulnerability

devalue.parse allows proto to be set A string passed to devalue.parse could represent an object with a proto property, which would assign a prototype to an object while allowing properties to be overwritten: js class Vector constructorx, y this.x = x; this.y = y; get magnitude return this.x 2 +...

7.9CVSS6.3AI score0.00369EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.16 views

PT-2026-51762

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.29 Description An issue exists where the software fails to detect malicious pickle files that utilize the SetText function within idlelib.debugobj.ObjectTreeItem inside reduce methods. Attackers can craft pickl...

8.1CVSS6.6AI score0.00253EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.16 views

PT-2026-51217

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.30 Description The software fails to detect cProfile.runctx function calls within pickle file reduce methods. This allows attackers to bypass detection and execute arbitrary code when malicious pickle files are...

8.1CVSS6.2AI score0.00338EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.19 views

PT-2026-51385

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.29 Description An issue exists where the software fails to detect malicious pickle files that utilize the get entity function within the idlelib.autocomplete.AutoComplete module in reduce methods. This allows...

8.1CVSS6.3AI score0.00431EPSS
SaveExploits0References12
Rows per page
Query Builder