When Safe Models Merge into Danger: Exploiting Latent Vulnerabilities in LLM Fusion

Model merging has emerged as a powerful technique for combining specialized capabilities from multiple fine-tuned LLMs without additional training costs. However, the security implications of this widely-adopted practice remain critically underexplored. In this work, we reveal that model merging...

CVE-2024-43653

CVE-2024-43653 affects Iocharger AC model chargers running firmware before 24120701. The issue is an authenticated command-injection flaw in the action that lets an attacker execute OS commands as root, giving full control over the charging station (files/services). Impact is described as critic...

Triton Malware Targets Industrial Control Systems in Middle East

Researchers found malware called Triton on the industrial control systems of a company located in the Middle East. Attackers planted Triton, also called Trisis, with the intent of carrying out a “high-impact attack” against an unnamed company with the goal of causing physical damage, researchers...