How to Create a Scan for Local File Inclusion

This whitepaper covers how to create a scan in Perl to identify different types of local file inclusion in web applications. Depending on the context of the environment and architecture, the content of the paper can be applied to APIs in addition to presenting how to correct or avoid local file...

Interagency Security Committee Compliance Policy and Compliance Benchmarks, 2024 Edition

The Interagency Security Committee Compliance Policy and Compliance Benchmarks, 2024 Edition outlines the ISC Compliance Policy and updates Compliance Benchmarks in alignment with Executive Order 14111 and the updated Risk Management Process Standard of 2024. These updated compliance benchmarks a...

Iconv Arbitrary File Read

This script is designed to exploit a vulnerability in systems that use the iconv library with improper handling of character encoding conversions, as described in CVE-2024-2961. The vulnerability allows an attacker to read arbitrary files on the server by leveraging PHP filter chains and improper...

Governing Bring Your Own AI: A Parameterized Maturity Model

Employees are increasingly using personally owned generative AI tools such as ChatGPT, Gemini, and Claude for their daily work. This practice is known as Bring Your Own AI BYOAI, which is a distinct form of Shadow AI in which employee-authenticated personal accounts are used outside of enterprise...

SENTINEL-RL: Offloading Topological Reasoning from LLM Agents in the Security Operations Center

Large language model LLM agents are increasingly proposed as autonomous SOC analysts, but two limitations make them unreliable at enterprise scale: a finite context window cannot hold a multi-thousand-host authentication graph, and free-form generation offers no guarantee that a recommended...

The Native-Signature Boundary in Post-Quantum Distributed Authorization

Post-quantum signature migration poses a distinct systems problem when authorization is distributed among multiple parties. In native threshold signing, the signature algorithm may determine key generation, share state, preprocessing, interaction, combination, refresh, and recovery. Architectures...

SpiderSapien: Client-Centric Web Crawler and Security Scanner

Black-box web application crawling and scanning play an important role for security testing of web applications. Yet state-of-the-art scanners fall short of addressing key characteristics of a modern web application: its extreme dynamism and interactivity on the client side. This paper identifies...

HiveTraceGuard-Pro: A Compact Generative Guardrail for Prompt Injection, Jailbreaks, and Adversarial Obfuscation

Production LLMs must handle inputs that attempt to override system instructions, bypass safety policies or elicit harmful responses. A common mitigation is a separate guardrail model. Existing reports, however, provide little evidence on Russian prompt injection or Russian surface obfuscation. We...

Towards Behavior Tree-Guided Vulnerability Detection with Lightweight LLMs

Large Language Models LLMs are increasingly used for software vulnerability detection, but their performance depends on how source code is represented in the input. Most prompting approaches use source code in its original form, while some works propose the use of structured representations...

The Guard That Cried Wolf: How Scary Words Make Agent Guardrails Refuse Legitimate Actions

Agent guardrails are checks that approve or refuse each action before an LLM executes it. Sometimes they refuse requests that are genuinely safe. This over-safety blocks deployment when a guardrail refuses an authorized task. Evaluating over-safety is hard: at the boundary an authorized action...

An Analysis of the Impact of Psychological Factors and Techniques across Different Types of Social Engineering

Phishing is a well-known social engineering SE type used to trick individuals into revealing personal information or performing desired actions, like downloading and installing malware. Other SE types, like vishing and smishing, have emerged and are increasingly being used. As SE continues to...

Evaluating and Preventing Security Smells in AI-Generated Ansible Code

AI coding assistants generate Infrastructure as Code, yet no work has examined whether this code meets security requirements. This matters because security smells in infrastructure code propagate to deployed systems, producing infrastructure that is insecure and untrustworthy. We evaluate 16 AI...

Survival Of~The~Stealthiest: Evolving Low-Entropy Ransomware Via~Genetic Algorithms

Traditional ransomware deployment often relies on massive encryption procedure, triggering immediate detection by modern defense systems. This work introduces a paradigm shift in cryptographic attacks by framing ransomware execution as a Search-Based Software Engineering SBSE optimization problem...

Ubuntu Security Notice USN-8629-2

Ubuntu Security Notice 8629-2 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system...

SUSE Security Advisory - SUSE-SU-2026:3636-1

SUSE Security Advisory - This update for redis7 fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...

Debian Security Advisory 6446-1

Debian Linux Security Advisory 6446-1 - A flaw was discovered in the UTF-16 decoding support of expat, an XML parsing C library, where low surrogates were treated in the same way as high surrogates. Parsing crafted XML input may result in an out-of-bounds read and a resultant infinite loop, leadi...

OpenZFS Linux Authorization Bypass / Memory Corruption

OpenZFS on Linux contains multiple authorization and parser flaws that can allow low-privileged container users to access host-pool operations, corrupt cross-tenant storage, trigger kernel memory corruption and denial of service, and, under demonstrated research conditions, escalate to a host uid...

Docmosis Tornado 2.11.3 Remote Code Execution

Docmosis Tornado version 2.11.3 contains an unauthenticated arbitrary file write vulnerability in the /api/render endpoint. A remote attacker can use the storeTo parameter with a file: destination to write rendered content to arbitrary new filesystem paths. When the service runs as root, a crafte...

Red Hat Security Advisory 2026-55758-03

Red Hat Security Advisory 2026-55758-03 - An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Issues addressed include buffer overflow and null pointer vulnerabilities...

uproot 5.7.4 TStreamerInfo Code Injection

uproot version 5.7.4 and prior contain a code injection vulnerability in the handling of ROOT TStreamerInfo metadata where attacker-controlled streamer fields are incorporated into dynamically generated Python source without sufficient quoting. A malicious ROOT file can therefore cause arbitrary...

Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluation

Foundation models are increasingly used for perception, reasoning, planning, and action generation in embodied agents, creating security risks that can propagate from digital inputs to physical behavior. Existing surveys often organize threats by mechanisms such as jailbreaks, prompt injection,...

ADAPTD: Adaptive Detection and Proactive Threat Defense for Autonomous APT Attacks

Advanced persistent threat APT actors increasingly employ sophisticated techniques to propagate laterally through segmented enterprise networks. Timely detection and defense depend on cross-subnetwork coordination, yet maintaining global situational awareness generates substantial communication...

Microsoft SharePoint Server SecurityContextToken Deserialization Remote Code Execution

Microsoft SharePoint Server contains an unauthenticated deserialization vulnerability in the /trust/default.aspx WS-Federation endpoint that can allow remote code execution through a crafted SecurityContextToken cookie. This proof of concept uses a BinaryFormatter TypeConfuseDelegate payload...

Authorization Before Context: A Model-Neutral Audience Boundary against Cross-Audience Memory Leakage in Agentic Systems

A personal language agent learns a fact from one audience and may later place it in the prompt it assembles for another. This memory-to-context step is an attack surface: ambiguous or inconsistent channels, cross-audience prying, and poisoned memory can each cause the system to assemble context...

Budibase 3.31.4 Authentication Bypass / Remote Code Execution

Budibase versions through 3.31.4 contain an authentication and authorization bypass vulnerability that allows an unauthenticated remote attacker to access protected API endpoints by placing a webhook route pattern in the request query string. This proof of concept first verifies the bypass agains...

Debian Security Advisory 6445-1

Debian Linux Security Advisory 6445-1 - Multiple security vulnerabilities were discovered in Ironic, the OpenStack component to management and provision of baremetal servers, which could result in bypass of administrative access/API restrictions, information disclosure or the execution of arbitra...

Citrix NetScaler ADC 13.1 SAML Heap Overflow / Remote Code Execution

Citrix NetScaler ADC and NetScaler Gateway versions prior to 14.1-72.61 and 13.1-63.18 contain a heap overflow vulnerability that can allow an unauthenticated remote attacker to execute arbitrary code when the appliance is configured to use SAML as a service provider or identity provider. This...

Expanding Access, Exposing Risk: A Short Study of Exposed Starlink Hosts

In this very short paper, we present a measurement-driven analysis of the security characteristics of Starlink-connected hosts and uncover several concerning trends. We find that Starlink hosts are more likely to run outdated or vulnerable operating systems and network protocols than non-Starlink...

Python StateMachine 3.1.2 Remote Code Execution

Python StateMachine 3.1.2 contains a code injection vulnerability in its SCXML processing functionality. The included proof of concept demonstrates code execution by writing a harmless marker file when the malicious SCXML datamodel expression is evaluated...

Assessing Attack Surfaces in Generative Search Engines through Publisher Attributes: A Case Study in Political Domains

We characterize the attack surface of generative search engines GSEs against poisoning attacks in the political domain, from the perspectives of citation selection and personalization. GSEs integrate web search and answer generation with user preferences and backgrounds using large language model...

Breaking and Defending LLM-Powered Social Media Bot Detection Systems

The rise of social media bots poses a persistent threat, enabling misinformation, opinion manipulation, and the erosion of trust in online platforms. To combat this, machine learning systems have been developed to detect and limit bot activity, but attackers continuously adapt through techniques...

Hierarchical Agentic Incident Response with Digital-Twin-Validated Attack Inference

Network incident response remains slow and labor-intensive as the defender must infer multi-stage attacks from partial observations and translate recovery decisions into reliable system commands. Decision-theoretic planners provide principled optimization but typically rely on abstract states and...

TopoIntent: Compiling Security Intent into Executable, Compliance-Checked Network Topologies

Enterprise security topology design requires translating business intent, regulatory requirements, and risk assumptions into zones, boundary devices, inter-zone paths, and access-control policies. Existing NetOps automation tools mainly operate after this design is fixed, providing limited suppor...

Rethinking Agent Security As a Networking Problem

AI agents are rapidly becoming more capable and widely deployed, promising substantial gains in productivity and enabling new classes of applications. However, their growing autonomy also introduces significant privacy and security risks. Existing defenses are predominantly agent-centric, relying...

Towards Model-Based Run-Time Cybersecurity: On Control-Flow Anomaly Detection, Attack Identification, and Hardware Monitoring

Methods to increase the resilience of systems to cyber-attacks become increasingly important. Control-flow monitoring provides a principled basis to ensure integrity and detect possible anomalies at run-time. Once anomalies have been detected, so-called attack trees can be used to identify possib...

A Comparison of Malware Image Transformations Using Grad-CAM and Hybrid Learning Models

Recent studies have shown that binary-to-image representations can enable effective machine learning-based results for malware detection and classification. However, performance can vary significantly, depending on the technique used to convert binaries to images. Furthermore, the explainability...

A Bird'S-Eye View on Security Considerations in RFCs

Request for comments RFCs are Internet standards, memorandums, and related technical documents about core Internet protocols made via and released by the Internet Engineering Task Force IETF. In the early 1990s each RFC was required to have a section for security considerations. The present work...

Memoir: Learning, Verifying, and Evolving False-Positive Memories for Static Application Security Testing Tools

Static Application Security Testing SAST tools have become indispensable in modern secure software devel- opment. However, these tools often generate false-positive FP alerts, imposing substantial manual inspection costs and reducing the trust from developers. Existing FP reduction methods still...

Nimux 1.0.5

Nimux is a native command surface for authorized security assessments. It combines network enumeration, credential validation, Active Directory operations, Kerberos workflows, remote execution, file movement, secrets collection, DCSync, GPO operations, database clients, and SOCKS routing into one...

Joern 4.0.600

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Pass-The-Passkey Family of Attacks

Research on passkey security uncovered three practically exploitable zero-day vulnerabilities in Windows 11 and Microsoft Entra ID. Two of them form a replay chain: Windows writes complete WebAuthn assertions to the event log for device-bound and hybrid authenticators, while Microsoft Entra ID...

Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection

The rise of autonomous AI agents represents a major paradigm shift in how users interact with mobile devices. Frameworks such as MobileRun and Mobile-Use can autonomously navigate Android applications and execute complex multi-step tasks. To interpret user interfaces, these frameworks rely...

Diversity Matters: Distributional Feature Coverage Sample Selection for Data-Efficient Backdoor Attacks

Backdoor attacks compromise training data so that a model retains clean accuracy but predicts an attacker-chosen target on triggered inputs. At very low poisoning rates, only a few samples convey the trigger--target association, making poison-sample selection critical. Existing methods typically...

Clam AntiVirus Toolkit 1.5.4

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...

Understanding and Improving Model Editing for Secure Code Generation

Large language models LLMs are widely used for code generation, yet they can reproduce vulnerable implementations learned from insecure training patterns. Prior work has mainly explored inference-time hardening, which reduces insecure generations without modifying the target model but relies on...

Enhancing Anomaly Resilience in Research Networks: A Large-Scale Forecasting Benchmark for Dynamic Security Baselining

Research and Education Networks RENs serve as critical infrastructure for scientific discovery, yet they face a unique security paradox: their normal traffic patterns which are characterized by massive, bursty "elephant flows" are statistically indistinguishable from volumetric attacks such as DD...

Checked-In Secret Detection: Strings Are All You Need

Hardcoded secrets in source code pose critical security vulnerabilities which can be easily exploited by malicious adversaries. Existing regex-based detection approaches suffer from fundamental limitations, as secrets often lack identifiable patterns, resulting in poor precision and recall. Recen...

ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection

The rapid advancement of modern technology has led to a significant increase in the use of smart devices, such as smartphones and tablets, resulting in the widespread adoption of mobile applications. Although applications are required to undergo malware screening before being published on officia...

Securing Load Balancing over QUIC

In-network load balancing outperforms traditional software load balancing while costing less. For instance, programmable switch ASICs can use hashing to select the backend server for the initial packet of each flow at the line rate. However, when the pool of available servers changes, ensuring th...

Paged Out! Magazine Issue 8

Paged Out! magazine issue 8 includes sections related to art, algorithms, artificial intelligence, assembly, cryptography, encodings, file formats, food for thought, hardware, networks, OS internals, operating systems, programming, retro stuff, reverse engineering, security / hacking, and system...