Red Hat Security Advisory 2026-55865-03

Red Hat Security Advisory 2026-55865-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9. Issues addressed include integer overflow, out of bounds read, and out of bounds write vulnerabilities...

Cisco Secure Firewall Management Center Authentication Bypass / Remote Code Execution

Cisco Secure Firewall Management Center contains an authentication bypass vulnerability that can allow an unauthenticated remote attacker to access a startup-created machine session and ultimately execute code as root. This proof of concept implements the publicly documented attack chain, includi...

Red Hat Security Advisory 2026-55930-03

Red Hat Security Advisory 2026-55930-03 - An update for modhttp2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and out of bounds read vulnerabilities...

Red Hat Security Advisory 2026-56131-03

Red Hat Security Advisory 2026-56131-03 - An update for pam is now available for Red Hat Enterprise Linux 8...

Apple Security Advisory 08-17-2026-2

Apple Security Advisory 08-17-2026-2 - iOS 18.7.10 and iPadOS 18.7.10 addresses buffer overflow, bypass, code execution, heap corruption, information leakage, integer overflow, out of bounds access, out of bounds read, out of bounds write, and use-after-free vulnerabilities...

JetBrains Datalore 2026.2.3 Remote Code Execution

JetBrains Datalore On-Premises version 2026.2.3 contains an authorization flaw in publicly shared interactive reports. An unauthenticated remote attacker with access to a public report can have READ permissions incorrectly mapped to EXECUTE permissions, allowing access to computation RPC methods...

Red Hat Security Advisory 2026-55892-03

Red Hat Security Advisory 2026-55892-03 - An update for unbound is now available for Red Hat Enterprise Linux 10. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-55861-03

Red Hat Security Advisory 2026-55861-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...

Achievement Unlocked: Let'S Get Hacked! an Empirical Study of Cybercrime in the Video Gaming Ecosystem

The ubiquity of the video game industry and its large user base have transformed video games into complex social and economic ecosystems. Unfortunately, this growing popularity also attracts cybercriminals who deliberately exploit game-specific mechanisms to target players. Despite this growing...

Apple Security Advisory 08-17-2026-1

Apple Security Advisory 08-17-2026-1 - iOS 26.6.1 and iPadOS 26.6.1 addresses bypass, code execution, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities...

LifeOS 7.40.4

LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...

Red Hat Security Advisory 2026-55801-03

Red Hat Security Advisory 2026-55801-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...

Red Hat Security Advisory 2026-55856-03

Red Hat Security Advisory 2026-55856-03 - An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Red Hat Security Advisory 2026-55618-03

Red Hat Security Advisory 2026-55618-03 - An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10...

Ubuntu Security Notice USN-8631-4

Ubuntu Security Notice 8631-4 - Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue...

Red Hat Security Advisory 2026-55763-03

Red Hat Security Advisory 2026-55763-03 - An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9...

Debian Security Advisory 6446-1

Debian Linux Security Advisory 6446-1 - A flaw was discovered in the UTF-16 decoding support of expat, an XML parsing C library, where low surrogates were treated in the same way as high surrogates. Parsing crafted XML input may result in an out-of-bounds read and a resultant infinite loop, leadi...

Apple Security Advisory 08-17-2026-3

Apple Security Advisory 08-17-2026-3 - macOS Tahoe 26.6.2 addresses code execution, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities...

Red Hat Security Advisory 2026-54580-03

Red Hat Security Advisory 2026-54580-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements...

Red Hat Security Advisory 2026-55560-03

Red Hat Security Advisory 2026-55560-03 - An update for pcp is now available for Red Hat Enterprise Linux 8. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...

Red Hat Security Advisory 2026-55765-03

Red Hat Security Advisory 2026-55765-03 - An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution and out of bounds write vulnerabilities...

ActFax Server 10.70 Remote Code Execution

ActFax Server version 10.70 contains an unauthenticated remote code execution vulnerability in its LPD service. A remote attacker can submit a crafted print job containing an @F211 fax destination and PostScript content that abuses the Ghostscript pipe operator. When the document is rasterized by...

Red Hat Security Advisory 2026-55756-03

Red Hat Security Advisory 2026-55756-03 - An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include buffer overflow and null...

Red Hat Security Advisory 2026-55764-03

Red Hat Security Advisory 2026-55764-03 - An update for kernel is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution and out of bounds write vulnerabilities...

Digital Twin-Based Intrusion Detection for Vehicle Powertrain CAN Bus Systems

Existing automotive intrusion detection systems IDSs for the Controller Area Network CAN largely target discrepancies in message timing, frequency, or sequencing and cannot detect attacks that preserve these properties while manipulating the payload. Digital twins DTs have been used to emulate CA...

Expanding Access, Exposing Risk: A Short Study of Exposed Starlink Hosts

In this very short paper, we present a measurement-driven analysis of the security characteristics of Starlink-connected hosts and uncover several concerning trends. We find that Starlink hosts are more likely to run outdated or vulnerable operating systems and network protocols than non-Starlink...

Fastjson 1.2.83 Remote Code Execution

Fastjson versions 1.2.68 through 1.2.83 contain a remote code execution vulnerability that can allow an attacker to cause a vulnerable application to load attacker-controlled Java classes. This proof of concept generates a malicious JAR containing a reverse shell payload, serves the JAR over HTTP...

Authorization Before Context: A Model-Neutral Audience Boundary against Cross-Audience Memory Leakage in Agentic Systems

A personal language agent learns a fact from one audience and may later place it in the prompt it assembles for another. This memory-to-context step is an attack surface: ambiguous or inconsistent channels, cross-audience prying, and poisoned memory can each cause the system to assemble context...

Probing the Prefill: Detecting Code Vulnerabilities Via Latent Activations

LLM-based code generation is now embedded in mission-critical pipelines, but defenses against vulnerable output remain post-hoc -- static analyzers, fine-tuned classifiers, or an LLM judge that screen completed code, ignoring the generating model's own internal state. We test a narrower, directly...

Proving the Utility of Large Language Models in Cybersecurity Simulations: A Comprehensive Examination

Cyber threats continue to escalate in both frequency and sophistication, necessitating more adaptive and scalable defense strategies. This paper explores how Large Language Models LLMs can bolster cybersecurity simulations by automating the creation of synthetic environments and identifying laten...

Citrix NetScaler ADC 13.1 SAML Heap Overflow / Remote Code Execution

Citrix NetScaler ADC and NetScaler Gateway versions prior to 14.1-72.61 and 13.1-63.18 contain a heap overflow vulnerability that can allow an unauthenticated remote attacker to execute arbitrary code when the appliance is configured to use SAML as a service provider or identity provider. This...

SUSE Security Advisory - SUSE-SU-2026:3628-1

SUSE Security Advisory - This update for texlive fixes the following issues. NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. Use-after-free in synctexparser.c in TeX Live...

A Deployment-Oriented and Resource-Efficient Neuro-Symbolic Framework for Explainable DDoS Detection in Operational Technology Networks

Operational technology OT environments, including programmable logic controllers PLCs, industrial control systems ICS, and supervisory control and data acquisition SCADA systems, are increasingly targeted by distributed denial-of-service DDoS attacks. This paper presents a neuro-symbolic framewor...

Structured Driving-State Narratives for Small Language Model-Based GNSS Spoofing Detection

Autonomous vehicles AVs depend on reliable Global Navigation Satellite System GNSS positioning. However, spoofed GNSS signals can induce plausible but incorrect vehicle states. This study develops a small language model SLM-based framework for detecting and classifying GNSS spoofing attacks by...

ADAPTD: Adaptive Detection and Proactive Threat Defense for Autonomous APT Attacks

Advanced persistent threat APT actors increasingly employ sophisticated techniques to propagate laterally through segmented enterprise networks. Timely detection and defense depend on cross-subnetwork coordination, yet maintaining global situational awareness generates substantial communication...

LLMs for Zero-Shot Threat Detection Via Structured Risk Indicators

We propose a two-stage large language model LLM framework for zero-shot detection of insider threats and advanced persistent threats APTs from heterogeneous security logs. The framework models user activity as chronological timelines and incorporates retrieval-augmented generation RAG to provide...

DSPrompt: Dynamic Soft Prompt Defense against M-RAG Corruption

Multimodal Retrieval Augmented Generation M-RAG is increasingly vulnerable to adversarial attacks where malicious data are crafted to produce embeddings that align with benign entries in the vector space, deceiving retrieval and inducing harmful outputs. Existing defenses primarily operate at que...

PHP BCMath 8.5.8 Remote Code Execution

PHP BCMath versions 8.4.0 through 8.4.23 and 8.5.0 through 8.5.8 contain an out-of-bounds write vulnerability in bcstr2num. The issue can be leveraged from an existing PHP code execution context to corrupt Zend heap metadata, establish arbitrary memory access, resolve native PHP function handlers...

AI across the Intrusion Lifecycle

Gambit has investigated three unrelated threat actors that illustrate how attackers are incorporating AI into real-world intrusions and the roles AI systems now play during offensive operations...

Beyond the Hype: Evaluating LLM Integration and Practical Limitations in Security Operation Centers

Large Language Models LLMs are increasingly being explored within Security Operation Centers SOCs to support text-heavy analytical work such as alert contextualization, incident summarization, and drafting investigative artifacts. Despite this interest, practitioners describe critical operational...

openSUSE Security Advisory - openSUSE-SU-2026:11527-1

openSUSE Security Advisory - These are all security issues fixed in the sccache-0.17.01-2.1 package on the GA media of openSUSE Tumbleweed...

When Agents Act on Web3: An Attack-Surface Survey of MCP, Skills, and Tool Calling

AI agents increasingly act rather than merely read: across the Model Context Protocol MCP ecosystem, the share of deployed tools that modify external state has risen from 27% to 65% of tool use. When agents exercise this authority on public blockchains through MCP, skills, and tool calling, the...

CUSTOS: Toward Forensic-Ready Zero Trust at the Capture-Containment Boundary

Zero Trust ZT replaces implicit trust with continuous verification, but mutual TLS, ephemeral workloads, identity-centric control, and automated remediation reduce payload visibility, weaken IP-based attribution, and shrink the window for acquiring volatile evidence. We propose CUSTOS, a...

openSUSE Security Advisory - openSUSE-SU-2026:11524-1

openSUSE Security Advisory - These are all security issues fixed in the python313-pysaml2-7.5.4-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE Security Advisory - openSUSE-SU-2026:11523-1

openSUSE Security Advisory - These are all security issues fixed in the python313-h2-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

MindsDB Minds Platform Cowork Unauthenticated Remote Code Execution

MindsDB Minds Platform Cowork contains an unauthenticated remote code execution vulnerability in the Cowork server API where unauthenticated settings modification can be combined with the Anton agent scratchpad functionality to execute arbitrary Python code without sandboxing. This proof of conce...

Budibase 3.31.4 Authentication Bypass / Remote Code Execution

Budibase versions through 3.31.4 contain an authentication and authorization bypass vulnerability that allows an unauthenticated remote attacker to access protected API endpoints by placing a webhook route pattern in the request query string. This proof of concept first verifies the bypass agains...

Ghost CMS 6.19.0 Content API SQL Injection

Ghost CMS versions 3.24.0 through 6.19.0 contain an unauthenticated SQL injection vulnerability in the Content API that can allow a remote attacker to read arbitrary information from the application's database. This proof of concept automatically discovers the Content API key and endpoint, uses...

Quantum-Safe Web Service Architecture Using Time-Based One-Time Passwords

One-Time Passwords OTPs have become a common option for multi-factor authentication in several applications. For instance, during website login processes, OTPs are often used in conjunction with traditional text-based usernames and passwords to verify whether the access request originates from a...

WordPress Events Manager 7.4 Unauthenticated Administrator Privilege Escalation

WordPress Events Manager versions 7.4 and below contain an unauthenticated privilege escalation vulnerability caused by improper capability mapping for event and location post identifiers. An unauthenticated attacker can exploit a collision between a WordPress user ID and an Events Manager post I...