PT-2026-92854

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.9 through 12.2.15 Description A flaw in the Personalization component of the Oracle Applications Framework allows a low privileged attacker with network access via HTTP to...

PT-2026-92849

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Application...

Evaluating the Impact of Personalization in Conversational Cybersecurity Assistants

Users increasingly turn to Large Language Models to answer a variety of questions, including cybersecurity questions. We study how personalization strategies can help improve the effectiveness of answers to questions asked to an LLM-based cybersecurity assistant. Beyond accuracy, we focus on the...

PT-2026-92728

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

PT-2026-92853

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Applications Framework versions 12.2.9 through 12.2.15 Description A flaw in the Personalization component of the Oracle Applications Framework allows a low privileged attacker with network access via HTTP to...

Engineered Persuasion: Evaluating Personalized Pretexts in LLM-Generated Spear Phishing

Large language models can insert workplace details into phishing pretexts at low cost, but those details may either support or undermine a message's credibility. We recruited 180 U.S. working adults to evaluate simulated, AI-generated phishing emails in a disclosed survey. The emails used four...

Your Website Now Has Two Audiences: Humans and AI

...

Assessing Attack Surfaces in Generative Search Engines through Publisher Attributes: A Case Study in Political Domains

We characterize the attack surface of generative search engines GSEs against poisoning attacks in the political domain, from the perspectives of citation selection and personalization. GSEs integrate web search and answer generation with user preferences and backgrounds using large language model...

CVE-2026-66446

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

CVE-2026-66446: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dutafi in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10...

FBID: Adaptive Personalized Federated Learning for Robust Out-Of-Distribution Attack Detection in IoT Networks

Personalized Federated Learning PFL has emerged as a promising solution for intrusion detection in heterogeneous IoT environments, as it can improve local adaptation under highly Non-Independent and Identically Distributed non-IID data distributions. However, existing PFL methods often rely on...

The Hidden Latency Tax in Retail Personalization

Every personalization decision adds latency that has a measurable cost in conversions and order value. Learn where that cost comes from — and how to avoid paying it...

CONTRA: Red-Teaming Configurations of Personalizable Agents

Recent tools such as OpenClaw have extended the capabilities of LLM-based agents from simple dialog-based systems to fully autonomous agents. These systems allow personalization of the agent through modifiable internal files and the installation of skills. While this enables deployment in a wide...

io.jenkins.blueocean:blueocean (1.0.0-b25), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b25) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b25 -...

Meta to Use Off-Site Business Data for Feed and AI Personalization

Meta on Tuesday announced that it will use information shared by other businesses to personalize users' feed and responses from its artificial intelligence AI chatbot, expanding its scope beyond targeted ads. "Businesses often share information about people's activity on their sites with us to ma...

CVE-2026-34298

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

EUVD-2026-24385

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2026-34298

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2026-34298: Improper Access Control

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...