8056 matches found
Xalgorix Autonomous AI Pentesting Agent 4.5.87
Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...
ADVERSARIAL: And-Inverter Graph-Assisted Hardware Trojan Detection at Scale
Modern System-on-Chip SoCs often contain hundreds of millions to tens of billions of gates, making existing Hardware Trojan HT detection methods impractical due to their immense scale. The proposed approach incorporates symbolically enabled learning by modeling flattened gate-level netlists as...
LWIS Kernel Driver Out-Of-Bounds Write
The lwis driver provides an interface for writing data to dma-buf objects via the LWISIOENTRYWRITETOBUFFER command. In lwisiobufferwrite, the driver performs a memcpy from a kernel-allocated copy of user data into the kernel mapping of a dma-buf. The driver uses the offset and sizeinbytes fields...
Construction of a Class of Communication-Efficient Quantum Secret Sharing Schemes
Quantum secret sharing is a fundamental technique in quantum cryptography. However, in practical quantum networks, it still faces several bottlenecks, such as high quantum communication cost and low transmission efficiency. To reduce the communication cost, ramp quantum secret sharing schemes hav...
Qualys Security Advisory - snap-confine Privilege Escalation
Qualys has discovered a local root privilege escalation vulnerability in set-capabilities versions of snap-confine...
WordPress 5.6+ SkelerSecurity Core Security Plugin REST Batch API Mitigation
This WordPress plugin provides a temporary mitigation for the REST Batch API vulnerability chain commonly referred to as "wp2shell." It requires authentication before requests to the /wp-json/batch/v1 and ?restroute=/batch/v1 endpoints are processed, preventing unauthenticated exploitation of the...
A Multi-Model Hybrid Defense Approach against White-Box Adversarial Attacks in Computer Network Traffic
It is crucial to safeguard computer networks from evolving network security threats and unknown cyberattacks. An essential tool for protecting computer networks against unknown cyber threats is Network Intrusion Detection System NIDS. However, NIDS faces a major security concern due to its...
Towards Quantum Machine Learning for Assessing the Resilience of Post-Quantum Cryptography
The potential capabilities of quantum computers motivated the development of cryptographic protocols suitable for securing communication against adversaries with access to large fault-tolerant quantum computers. However, even though current quantum computers are limited in terms of size and...
Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation
Reusable skills are becoming a fundamental building block of Large Language Model LLM agents, enabling capabilities to be packaged, shared, and reused across diverse applications. However, existing security research primarily focuses on prompt injection and runtime execution, leaving security ris...
Rethinking Penetration Testing for AI-Enabled Systems: From Resource Compromise to Behavioral Objective Violation
Penetration testing traditionally evaluates whether adversaries can exploit weaknesses in software, infrastructure, configurations, or operational controls to achieve security-relevant compromise. This paradigm remains necessary for AI-enabled systems, but it is no longer sufficient. In such...
Evaluating Frontier AI Agents As Autonomous Clinical Security Auditors
Clinical AI models can expose patients to harm when adversarial vulnerabilities go undetected, yet formal security auditing requires statistical expertise, specialized tools, and significant time. We present an open evaluation task, built on METR Task Standard v0.3.0, that tests whether frontier ...
When Binaries Talk Back: Representation-Confusion Attacks on LLM-Assisted Reverse Engineering
LLM-assisted reverse-engineering RE systems analyze strings, decompiler output, and tool reports derived from ttacker-controlled binaries. A binary can make data look like instructions or records from one origin look like independent evidence. We call such failures Representation-Confusion Attack...
Trust but Verify? Uncovering the Security Debt of Autonomous Coding Agents
The increasing adoption of autonomous coding agents accelerates software development but also introduces scoped security risks within high-impact file paths that can outpace traditional human review capacity. While prior research has primarily evaluated these systems in terms of functional...
Xalgorix Autonomous AI Pentesting Agent 4.5.59
Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...
Joern 4.0.580
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation
We introduce the Self-Evolving Agentic Operating System SE-AOS: a new class of AI agent that treats exploit capability as a mutable, versioned kernel it extends at runtime, observing its own failures, synthesising new capabilities, proving them against a live target, and hot-loading them back int...
Flounder 0.2.0
Flounder turns modern coding agents into an end-to-end security audit system. Give it an authorized target boundary - a repository, source tree, package, deployed clue, or prior run - and the agent can prepare the workspace, read the code and supporting material, map the attack surface, dig into...
Beware What You Autocomplete: Forensic Attribution of Backdoored Code Completions
Large language models have enabled powerful code completion systems that assist developers by predicting subsequent lines of code. However, these models remain vulnerable to backdoor attacks, where malicious fine-tuning data covertly implants unsafe behaviors. Despite advances in defensive...
OpenCATS 0.9.7.4 Time-Based Blind SQL Injection
This Python script targets a remote SQL injection vulnerability in OpenCATS version 0.9.7.4...
IPv6 WebSocket Test Server
This script is a minimal, Python WebSocket server that listens on all IPv6 addresses dual-stack enabled on port 8765. It performs the WebSocket handshake, sends a test text message, and responds to connections in separate threads...
LifeOS 6.0.0
LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...
Asterisk 23.4.1 Security Release
The Asterisk Development Team would like to announce security release Asterisk 23.4.1. It addresses 20 security issues...
FBI FLASH: Cyber Criminal Group TeamPCP
The Federal Bureau of Investigation FBI is releasing this FLASH to highlight the tactics, techniques, and procedures TTPs and indicators of compromise IOCs associated with the cyber criminal group TeamPCP. TeamPCP actors have conducted large-scale software supply chain compromises by targeting...
Asterisk 21.12.3 Security Release
The Asterisk Development Team would like to announce security release Asterisk 21.12.3. It addresses 20 security issues...
Joern 4.0.573
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System
The paper presents a longitudinal measurement study on the adoption of the pledge and unveil system calls in OpenBSD. These system calls are used to sandbox programs and libraries. Given a dataset covering 19 releases, many programs and libraries were modified to use the system calls already befo...
Hacking Measurement-Device-Independent Quantum Key Distribution
The security of practical quantum key distribution QKD systems is fundamentally constrained by vulnerabilities of single-photon detectors. Measurement-device-independent quantum key distribution MDI-QKD was proposed to remove this limitation by allowing all measurements to be performed by a...
Beyond Gradient-Based Attacks: Adversarial Robustness and Explainability Stability in Cybersecurity Classifiers
Adversarial attacks on cybersecurity classifiers pose a dual threat: degrading predictions and destabilising the SHAP-based explanations that security analysts rely on to understand and triage alerts. We extend our prior MLP conference study to Random Forest and XGBoost across four tabular securi...
Generative AI and Federated Learning for Intrusion Detection Systems: A Survey
Intrusion Detection Systems IDSs are essential for monitoring network traffic and identifying malicious activities in modern cyber-physical, Internet of Things IoT, enterprise, and distributed network environments. However, developing reliable IDS models remains challenging because attack behavio...
CISA: The Journey to Zero Trust
The Journey to Zero Trust is a series of resources on cybersecurity capabilities and architecture topics in support of organizational adoption of modern zero trust principles. Zero trust, with its core concept of never trust and always verify, is the evolution of previous cybersecurity capabiliti...
CVE-TTP KG: Knowledge Graph Linking Software Vulnerabilities to Attack Behaviors
In the evolving threat landscape, adversaries exploit software vulnerabilities to launch sophisticated attacks, challenging traditional defenses. Although databases like CVE and NVD provide detailed technical information, they often lack links to attacker behaviors such as tactics and techniques,...
Hybrid Topological Data Analysis and LSTM Networks for Enhanced Network Intrusion Detection Using CIC-IDS2017 Dataset
Network intrusion detection systems NIDS are crucial in cybersecurity infrastructure, needing advanced techniques to detect hostile activity in network traffic. This research introduces a hybrid approach that combines Topological Data Analysis TDA with Long Short-Term Memory LSTM networks to...
Securing the AI Agent: A Unified Framework for Multi-Layer Agent Red Teaming
The fast growth of open-source AI infrastructure, from model serving engines and agent platforms to the Model Context Protocol MCP ecosystem and the language models themselves, has outpaced the security tooling available to defend it. We present AI-Infra-Guard, an open-source framework that...
EnclaveX: End-To-End Confidential AI with CPU/GPU TEEs
Large Language Models LLMs have rapidly proliferated, driving widespread adoption of AI applications. Most deployments rely on centralized infrastructures such as Microsoft Azure, Google Cloud, or AWS, requiring users to share sensitive data and training or fine-tuning code. This dependence raise...
An Empirical Study of Security Calibration in Large Language Models for Code
Large Language Models LLMs are rapidly transforming software development, yet their use in security-critical contexts raises a key question: do models know when their generated code is insecure? This property, known as calibration, measures whether a model's confidence aligns with the true...
FLARE-AI: Flaw Reporting for AI
Flaw reporting for deployed AI systems is fundamental to identifying system failures and improving AI safety. Yet the AI reporting ecosystem is fragmented: researchers who identify flaws often do not know what or where to report, and groups who receive reports rarely share them with other relevan...
Robocalls: A Worldwide or US-Only Problem? Analyzing Spam and Fraud in International Phone Calls
Unsolicited automated phone calls robocalls are a serious threat: in the US alone, these calls resulted in reported losses of 1.1$ billion during 2025. Phishing and spoofing consistently rank among the most reported crimes within the FBI's Internet Crime Complaint Center, with phone call scams...
A Forgery Attack on the Block.Co Blockchain-Based Digital Credential Certification System
Certification of digital documents, such as academic credentials, seems a particularly suitable application for the use of blockchain and distributed ledger technologies. Indeed, these technologies enable decentralized certification systems that rely on the immutability and persistence of their...
Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense
We identify a security-fidelity tradeoff in defending LLMs against indirect prompt injection: defenses resist injected instructions largely by suppressing untrusted text, which corrupts tasks that must preserve it, such as translation and document editing. Attack-success metrics cannot see this,...
Maestro 0.17.2
Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...
Understanding and Evaluating Claw-Like Agent Security through a Computer-Systems Lens
Claw-like AI agents e.g., OpenClaw are always-on processes with persistent access to credentials, files, tools, and external services. They take on system-level responsibilities -- installing packages, maintaining state, scheduling subtasks, and mediating I/O -- making security failures far more...
How Humans, Bots, and Agents Communicate about Vulnerabilities in Pull Requests
Developers may reference vulnerabilities in pull request discussions through both explicit identifiers, such as CVEs or GHSAs, and implicit security-related language e.g., "unauthorized access" or "SQL injection". Prior work has primarily focused on explicit identifiers, potentially overlooking...
Ghost without Shell: Measuring Non-Interactive SSH Attacks on Honeypots
Cyber deception research has focused on improving honeypot deception capabilities to increase attacker engagement and extend their interactions to collect more and better intelligence. For SSH honeypots, this relies on the assumption that attackers log in, open a shell, and type. We tested whethe...
YARA-X 1.19.0
YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...
RIFT-Bench: Dynamic Red-Teaming for Agentic AI Systems
Agentic AI systems powered by large language models LLMs are rapidly evolving into autonomous decision-making systems, exposing attack vectors beyond those of traditional LLM vulnerabilities. Existing security evaluations are often tied to specific implementations or domains, limiting unified...
Apple Security Advisory 06-16-2026-1
Apple Security Advisory 06-16-2026-1 - Beats Firmware Update 1B211 addresses an eavesdropping vulnerability...
Apache 2.4.66 HTTP/2 mod_http2 Double-Free Denial of Service
This script is a multi-mode security tool that triggers a denial of service against Apache HTTP Server version 2.4.66 related to a double-free condition in HTTP/2 handling...
Children Are Not the Enemy: Child-Fit Security As an Alternative to Bans and Surveillance
Digital technologies are now central to children's learning, play, communication, identity formation, and social participation. Yet dominant approaches to children's online safety often rely on containment mechanisms, including bans, age gates, parental controls, monitoring, and screen-time...
A Red-Team Study of Anthropic Fable 5 and Opus 4.8 Models
We evaluate the adversarial robustness of two frontier large language models LLMs developed by Anthropic, Fable 5 and Opus 4.8, against four families of automated jailbreak attack across 7 826 harmful intents spanning a ten-category harm taxonomy. Using the HackAgent red-teaming framework, hundre...
Anywhere, Any-Stymie: Remote Activation of Trojan Malware on LiDAR with Modulated Signals
LiDAR sensors are widely deployed in autonomous systems for 3D perception and safety-critical decision-making. We identify a previously unexplored attack surface in which dormant malware embedded in the LiDAR sensing pipeline remains inactive during normal operation and can be externally triggere...