TrainShield: Targeted Awareness for Cybersecurity Training

In recent years, cybersecurity threats have increasingly exploited human behaviour rather than purely technical vulnerabilities, exposing the limits of traditional awareness programmes delivered outside real-world contexts. To bridge this gap, we introduce TrainShield, an interaction paradigm for...

A Multi-Objective AutoML-Based Efficient Intrusion Detection System for EV Charging Networks

Electric Vehicle Charging Systems EVCSs are increasingly connected with Internet of Things IoT devices, which improves charging intelligence but also expands their exposure to cyber-attacks. Intrusion Detection Systems IDSs are essential for securing EV charging networks; however, conventional...

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin allows a attacker to execute arbitrary code.

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

AI Security Leaderboard: Methodology, Results and Minimal Standard

Frontier AI model developers increasingly rely on layered safeguards to prevent catastrophic misuse, but little public evidence exists on how much protection these safeguards provide, or how consistently across developers. We introduce the FAR.AI Minimal Standard for Safeguards, Version 1.0: a...

MINI-76WR-62V2-RCP6

Bulletin has no description...

MINI-895P-PVQ3-G65M

Bulletin has no description...

MINI-FV8F-4VV5-2V36

Bulletin has no description...

MINI-F3P7-23RF-3X3G

Bulletin has no description...

MINI-W663-536M-5645

Bulletin has no description...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 – Android arm64 Local Privilege Escalation A res...

MINI-2XV6-548P-FRGV

Bulletin has no description...

onyx-agent

Onyx Agent v68 Multi-LLM agent framework for security testing...

Why Formal Monitors Fail: Attack Distribution Entropy As a Coverage Bound for LTL-Based LLM Agent Safety

Runtime safety monitors based on Linear Temporal Logic LTL and finite automata FSA are increasingly deployed to intercept unsafe tool-call sequences in LLM agents. Yet the same monitor achieves 68-75% attack coverage on some model architectures and near-zero on others, with no explanation from...

MINI-WF3X-442W-VFFG

Bulletin has no description...

MINI-Q2MR-J462-XXRW

Bulletin has no description...

MINI-QMM3-J99W-H34X

Bulletin has no description...

MINI-36V2-5G7V-M4P4

Bulletin has no description...

EUVD-2026-51669

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...

SUSE CVE-2026-64611

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...

From Chasing Ghosts to Missed Attacks: Perspectives and Perceptions of SOC Practitioners on LLM Integration, Risks, and Readiness

Security Operations Centers SOCs process large volumes of security events, requiring analysts to accurately detect and assess ongoing cyberattacks under time pressure. Recent advances in Large Language Models LLMs suggest potential benefits for security operations, yet their practical suitability...