On the Performance of Malware Detection Classifiers Using Hardware Performance Counters

Malware detection using Hardware Performance Counters HPC has emerged as a promising solution to improve the security of computing systems as a complement to antivirus software. Hardware-based malware detectors HMD use Machine Learning ML classifiers to detect malicious application patterns. The...

When Prompts Control Robots: Prompt Injection Attacks in Multi-Agent Robotic Systems

Large language models are increasingly integrated into autonomous robotic systems for task planning and control, but this integration exposes them to prompt injection attacks that can lead to unsafe decisions and physical harm. Multi-agent settings increase the risks through cross-agent...

Multi-LLM Consensus Framework for Evaluating Banking-Sector NIDS Dataset Coverage of MITRE ATT&CK Techniques

The systemic criticality of global banking networks has ren-dered them high-priority targets for advanced persistent threats, neces-sitating Network Intrusion Detection Systems NIDS whose operational effectiveness must extend beyond statistical accuracy. However, a signif-icant validation gap...

contextualized-topic-models (1.4.2) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.2)

sentence-transformers PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models 1.4.2 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

contextualized-topic-models (>=1.8.0, <=1.8.2) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.1)

sentence-transformers PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.8.0, =1.8.2 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

contextualized-topic-models (>=1.5.2, <=1.7.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.6)

sentence-transformers PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.5.2, =1.7.1 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

contextualized-topic-models (>=1.4.3, <=1.5.0) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.5.1)

sentence-transformers PYPI version 0.3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.4.3, =1.5.0 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

contextualized-topic-models (>=2.0.0, <=2.1.1) potentially affected by CVE-2026-68770 via sentence-transformers (1.1.1)

sentence-transformers PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =2.0.0, =2.1.1 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations...

Anthropic’s Opus 5 Is Better at Resisting Prompt Injection

The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 5.9% at k=15 and Mythos 5 2.6%, making it the most robust model...

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last month. In its latest patch for Chrome 151, released Wednesday,...

Anthropic Says Claude Hacked Into 3 Organizations During Cybersecurity Tests

In a review triggered by OpenAI’s Hugging Face incident, Anthropic discovered three of its AI models had breached real-world organizations during third-party evaluations...

CVE-2026-38713

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the ipsecconn interface. This vulnerability allows attackers to execute arbitrary...

CVE-2026-38709

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the net.setwan interface. This vulnerability allows attackers to execute arbitrary...

PT-2026-66635

Name of the Vulnerable Software and Affected Versions Hugging Face PyTorch Image Models affected versions not specified Description Remote attackers can execute arbitrary code on affected installations due to improper validation of user-supplied data during the parsing of checkpoints. This leads ...

Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility

TrendAI joins Nvidia as an inaugural partner in the Open Secure AI Alliance, advancing open models, harnesses, and research to strengthen cyber defense...

PT-2026-66610

Name of the Vulnerable Software and Affected Versions TR1200 version 2.4.15 TR3000 version 2.4.21 WR300 version 2.4.25 WR1200 version 2.4.23 WR1300 version 2.4.22 WR1500 version 2.3.10 WR3000 version 2.4.19 WR3600 version 2.3.16 WR6500 version 2.3.15 Description A command injection issue exists i...

A Comparative Analysis of Automated Techniques for Security Bug Report Identification

Timely identification of security-related bug reports is essential to minimize the window of vulnerabilities in software systems. Manually screening incoming bug reports to identify security-related issues is time-consuming, error-prone, and non-scalable for large-scale software systems. Thus, a...

Cybersecurity Detection Classification with Reasoning-Enabled Language Models

A major issue in Security Operations Centers SOCs is alert fatigue, as the number of detections reported is more than staff can triage in a given day. Prior work prompts or fine-tunes large language models LLMs to emit a triage label directly, but does not train them to reason about whether a...