CVE-2024-30973

CVE-2024-30973 - V-SOL G/EPON ONU - HG323AC-B Description Item: Item: G/EPON ONU Specification: HG323AC-B Device model XPON+2GE+1POTS+2WIFI+USB Device SN 70B64F-1234570B64F0C2C0C Hardware Version V1.0 Firmware Version V2.0.08-210715 PON S/N GPON000C2C0C Vulnerability Type: Incorrect...

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So

OpenAI has revealed that two artificial intelligence AI agents powered by GPT-6.1 Sol and GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks. The AI company said the incident took place on October 3 and 6, 2026, for Sol and Astra,...

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

OpenAI has disclosed seven new incidents in which its artificial intelligence AI models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party's wallet without authorization to...

Malicious code in sol-mint-utils (RubyGems)

Source: amazon-inspector 2940bc600ade9f91afdc44ccc04cdab589d276b0504b3f12ffb4a4e827920bd9 The gem ships a native-extension stub extconf.rb that gem install executes automatically, but no C/C++ sources accompany it and lib/solmintutils.rb is an inert stub defines VERSION and returns 'ok'. The READ...

Malicious Package

Overview sol-mint-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in sol-mint-utils (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2940bc600ade9f91afdc44ccc04cdab589d276b0504b3f12ffb4a4e827920bd9 The gem ships a native-extension stub extconf.rb that gem install executes automatically, but no C/C++ sources accompany it and lib/solmintutils.rb i...

MAL-2026-17795 Malicious code in sol-mint-utils (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2940bc600ade9f91afdc44ccc04cdab589d276b0504b3f12ffb4a4e827920bd9 The gem ships a native-extension stub extconf.rb that gem install executes automatically, but no C/C++ sources accompany it and lib/solmintutils.rb i...

PT-2026-107438

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In sol pdu decrypt, out is allocated as NET BUF SIMPLE17 and then filled with net buf...

More Incidents of AIs Going Rogue in Cybersecurity Challenges

The AI Security Institute has a new report of AI systems engaging in "unsanctioned behavior"--what I have been calling "genie behavior--while being tested on their cybersecurity capabilities. The incident stemmed from a single evaluation where agents were given a task of solving a cyber security...

CVE-2025-63235

A flaw was found in sol. The broker does not fully release resources when handling malformed or duplicate CONNECT packets. A remote attacker can send invalid CONNECT packets, which may cause the server to silently drop the connection or send a CONNACK without properly closing the session or...

CVE-2025-63235: Uncontrolled Resource Consumption

In sol commit 373d848 2024-12-12, the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server may silently drop the connection or send a CONNACK...

PT-2026-69096

Name of the Vulnerable Software and Affected Versions sol affected versions not specified Description The broker fails to fully release resources when processing malformed or duplicate CONNECT packets. If clients send invalid CONNECT packets due to failed authentication or repeated attempts, the...

Anthropic’s Opus 5 Is Better at Resisting Prompt Injection

The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 5.9% at k=15 and Mythos 5 2.6%, making it the most robust model...

OpenAI Models Escaped Containment and Hacked Hugging Face

The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack...

Malicious code in sol-prices (PyPI)

Source: kam193 3d95d5a12e7c7a9753ed8a1612ade65f2e5775940dec3eadaefb47ec670bfc1d Code exfiltrates the current python code and/or IPythonshell history --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-05-solana-token Reasons based on the campaign...

Malicious code in sol-structs (PyPI)

Source: kam193 6d466f5d94859498aa97e45fc82060c447a3004b4ea16e620a3fcc58ed8cfb3e --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: - infostealer - crypto-related --- Credit: OpenSSF source...

Malicious code in sol-batch-transfer-sdk (PyPI)

Source: kam193 dab4fb850a1ce0b83f1e7f74ce0281ca8309031037355f9a247dbd0a715eab4d The code silently adds a hardcoded address to the list of transfer recipients. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-05-old-sol-batch-transfer-sdk Reaso...

Malicious code in sol-token (PyPI)

--- Credit: OpenSSF source...

Malicious code in sol-instruct (PyPI)

Source: kam193 1476f5fb9d2cca155c1adb783b39f5fce22901480eb717733ed7e687bfd978f2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: spl-types-rentry-2024-07 Reasons based on the campaign: - infostealer - crypto-related --- Credit: OpenSSF source...

Malicious code in sol-regex-gener (PyPI)

Source: kam193 863af188c3f151e9ad44d0ed55e0a5faa7120032979ffcdbc822b6dd488dfc12 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code, exfiltrate TXT files and finally installs infostealers -...