8745 matches found
PackageKit Advanced Vulnerability Assessment with D-Bus and Polkit Security Analysis
This Python tool is an advanced security assessment framework designed to evaluate potential exposure to a PackageKit-related vulnerability scenario by combining version analysis, policy inspection, and D-Bus interaction testing...
PackageKit Evidence-Based Exposure Assessment Tool
This script is a defensive assessment utility designed to evaluate potential exposure around PackageKit deployments using observable system evidence rather than assumptions or exploitation attempts...
Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?
As network threats evolve, manual NIDS rule engineering has become a critical operational bottleneck. While Large Language Models LLMs show promise for automating this process, their ability to produce production-ready rules remains unvalidated. This paper presents a human-centered investigation...
Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies
Large Language Models LLMs and generative AI GenAI systems, such as ChatGPT, Claude, Gemini, LLaMA, Copilot, Stable Diffusion by OpenAI, Anthropic, Google, Meta, Microsoft, Stability AI, respectively, are revolutionizing cybersecurity, enabling both automated defense and sophisticated attacks...
MSCENet: A Multi-Scale Correlation Enhanced Network for Anomaly Detection
In the field of multivariate time series anomaly detection, against the backdrop of increasing data complexity and complex dependencies across multiple temporal scales, traditional methods often struggle to simultaneously capture temporal dynamic features and intricate inter-series correlations. ...
OpenSSH 10.4p1
OpenSSH is the premier connectivity tool for remote login with the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides a large suite of secure tunneling capabilities, several authentication methods, and...
TACTIC-KG: Toward Small Agent Teams for Cyber Threat Intelligence Knowledge Graph Construction
Cyber Threat Intelligence CTI reports are predominantly unstructured, heterogeneous, and noisy, which limits their direct usability for automated analysis and reasoning. Cybersecurity Knowledge Graphs CSKGs provide a structured representation of adversarial entities, actions, and relations, but...
Tenda HG7 / HG9 / HG10 Management Interface Assessment Module
This refactored Metasploit module shifts from denial of service testing toward defensive exposure assessment and configuration review. Rather than attempting exploitation or service disruption, it focuses on identifying exposed interfaces, weak configuration indicators, and improving visibility...
Nuclei 3.11.0
Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...
Slate Digital Connect 1.37.0 Security Scanner
This Python script is a local security scanner designed to detect potential exposure related to Slate Digital Connect and its components associated with CVE-2026-24066 and CVE-2026-24067...
Joern 4.0.575
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Maestro 0.17.3
Maestro is a cross-platform desktop app for orchestrating your fleet of AI agents and projects. It's a high-velocity solution for hackers who are juggling multiple projects in parallel. Designed for power users who live on the keyboard and rarely touch the mouse. Collaborate with AI to create...
Untrusted Content Masking for Web Agents with Security Guarantees
Defenses that provide security guarantees against prompt injection attacks rely on strict isolation between trusted instructions and untrusted data. In text-based environments such as tool-use APIs, this separation arises naturally: agents can reason from interface definitions without ever...
Strapi Content API Sanitization Bypass Detection Module Scanner
This Python script assesses exposure to CVE-2026-27886 in Strapi Content API endpoints by performing differential filter validation against where parameters. Detection compares baseline query behavior against controlledfilter predicates to determine whether unsanitized conditions reach backend...
HilEnT: Hilbert, Entropy Transformed Image Based Malware Detection
With the increasing threat of malware across various software related domains, malware detection and classification is critical to determine the response actions. Different strategies have been adopted to address the challenge of malware detection. With the advent of deep learning techniques,...
When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents
Persistent personal agents combine long-term memory with access to users' external environments, enabling personalized foreground assistance and proactive background execution. This integration also creates a new path to compromise: untrusted external content can be silently written into persiste...
F-ACVAE: A Federated Adaptive Conditional Variational Auto-Encoder for Privacy-Preserving Intrusion Detection in IoT Networks
The rapid proliferation of Internet of things IoT devices has significantly expanded the cyber-attack surface, necessitating robust and privacy-preserving intrusion detection systems IDS. However, centralized learning approaches often suffer from severe performance degradation due to...
LifeOS 6.0.5
LifeOS is a Life Operating System. It knows your goals, the people who matter to you, and where you are right now, and it works to move you toward where you want to be. The engine underneath is a verifiable loop: turn any request into testable criteria, then climb until they pass. This is the fir...
The Cathedral and the Bazaar of Software Vulnerabilities: From the NVD to the CNAs
For decades, the National Vulnerability Database NVD, the "Cathedral", has been the reference source for vulnerability information for downstream research and industry tasks, e.g., software update prioritization. An emerging "Bazaar" of diverse CVE Numbering Authorities CNAs has created many...
Detecting Vulnerability-Inducing Commits Via Multi-Stage Reasoning with LLM-Based Agents
Detecting vulnerability-inducing commits VICs at submission time is critical for improving the security and reliability of software systems. However, this task is highly challenging because it requires reasoning about the semantic impact of code changes from heterogeneous information sources,...
SAP NetWeaver SAML Endpoint Exposure Scanner Tool for Metadata Discovery
This Python script is a defensive security scanner designed to identify exposed SAML-related endpoints on SAP NetWeaver systems SAPBASIS versions 700–918...
WPProbe Plugin Enumeration Tool 0.12.4
A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...
Strapi CMS 5.36.1 Security Misconfiguration Detection Scanner
This is a scanner designed to identify potential security misconfigurations in Strapi CMS instances without performing exploitation or data extraction...
Agent Data Injection Attacks Are Realistic Threats to AI Agents
AI agents act on behalf of user prompts, consuming external data and taking actions based on the agent context. Prior research on AI agent security has primarily focused on indirect prompt injection IPI. Its most well-studied category is instruction injection, where attacker-controlled untrusted...
RustMizan: A Compilable, Contamination-Aware Benchmarking Framework for Rust Vulnerabilities
LLM agents are increasingly applied to vulnerability analysis, but existing benchmarks have not kept pace. They typically rely on small non-compilable snippets, focus on binary classification vulnerable or not, and do not account for the risk that publicly-released datasets are part of model...
Ghost Traffic: ICMP Tunneling-Based Billing Bypass in LTE Networks
Cellular data billing is a core operational mechanism for mobile Internet service providers ISPs, and a policy gap that excludes a specific protocol from usage accounting can lead to a practical security threat. Some cellular ISPs treat ICMP echo traffic as control traffic rather than user data a...
Measuring Healthcare Data Leaks and Security Flaws at Internet Scale
Systems that process medical data should be meticulously secured. Yet, network services in healthcare environments often fail to implement basic security measures. For example, previous studies showed that network segmentation flaws led to DICOM systems leaking millions of patient records. In...
Blockchain Attacks and Defenses: A Layered and Cross-Domain Survey
Blockchains have evolved from simple distributed ledgers into programmable platforms that process complex application logic and carry significant financial value. All modern Web3 systems share a common goal: providing secure, decentralized, and trustworthy execution in an increasingly...
Security Analysis of RIS-Assisted Physical-Layer Authentication over Multipath Channels
In physical layer authentication, verification of a user's identity is based on the characteristics of the transmission channel through which signals are delivered to the authenticator Bob. In this paper, we assume that the signals received by Bob pass through a \acRIS controlled by Bob and that...
ShadowProbe: Language-Extensible Detection of Hidden Algorithmic Complexity Vulnerabilities
Algorithmic Complexity Vulnerabilities ACVs arise when adversarial inputs trigger worst-case execution behavior, causing severe performance degradation or Denial-of-Service conditions. A key but underexplored source is shadow complexity: non-trivial computational costs hidden inside seemingly...
Security of Quantum Conference Key Agreement with Two-Way Classical Communication
Quantum conference key agreement QCKA enables multiple users to establish a common secret key with information-theoretic security and is regarded as a key primitive for secure communication in future quantum networks. However, practical implementations of QCKA typically suffer from higher noise...
Piercing Gilbreath'S Conjecture: From Deep Number Theory Insights to Fintech and Cybersecurity
I propose a new methodology to attack the fascinating Gilbreath's conjecture about prime numbers, first posted in 1878 and unsolved to this day. The problem statement is rudimentary: kids can understand it. However, despite decades of research, almost no progress has been made. This paper changes...
Let My Data Go: Data Brokers' Compliance with Opt-Out and Deletion Requests
Data brokers are a largely American phenomenon. They collect vast amounts of personal information about most adult U.S. consumers, mainly without the latter's knowledge or consent. Accumulated data can be sold to anyone, including employers, landlords, insurance agencies, banks, governments local...
Mean Time to Remediate Is Not a Fielding Model: A Cadence Audit for Enterprise Vulnerability Management
Enterprise security teams commonly summarize remediation through mean time to remediate MTTR, SLA compliance, dwell time, or detection delay. These metrics are useful, but they can hide how fixes actually reach the estate: continuously, through scheduled maintenance windows, in deployment rings, ...
Agentic SABRE: An Uncertainty-Aware Neuro-Symbolic Multi-Agent Framework for Adaptive Ransomware Detection
Ransomware has evolved into a complex, adaptive, and fast-moving adversary category in which static signatures and monolithic classifiers fail to generalise under concept drift, evasion, and behavioural polymorphism. In this paper, we present Agentic SABRE Semantic-Behavioural Arbitration for...
Securing Deep Learning Hardware: A Survey of Side-Channel Vulnerabilities and Countermeasures
As deep learning models are increasingly deployed in critical sectors such as healthcare, finance, and security, ensuring their protection against emerging threats has become crucial. Among these threats, side-channel attacks SCAs represent a particular challenge since they can extract sensitive...
Advanced Topic Modeling Techniques for Categorizing Software Vulnerabilities
The increasing complexity and frequency of software vulnerabilities demand efficient methods to analyze and prioritize threats. Traditional approaches often fail to process the vast amount of unstructured textual data effectively, highlighting the need for advanced solutions. This study leverages...
Conductance-Repair Evidence Graphs for Prospective Security Retrieval
Security retrieval is often evaluated as ranking over complete evidence, but operational triage is prospective: CVE descriptions, weakness metadata, fix commits, EPSS scores, KEV membership, validation-vector metadata, and side-channel benchmark routes arrive through separate channels, and many a...
Overloading Large Vision-Language Models for Jailbreaking
Large Vision-Language Models LVLMs exhibit remarkable vision-language capabilities and are increasingly deployed in real-world applications such as personal assistants, document analysis systems, and embodied agents. However, their dual-modal attack surfaces make them vulnerable to jailbreak...
Apple Security Advisory 06-29-2026-3
Apple Security Advisory 06-29-2026-3 - Safari 26.5.2 addresses out of bounds access, out of bounds write, and use-after-free vulnerabilities...
Joern 4.0.573
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
ThreatVisionAI: A Hybrid CNN-ViT Framework for Image-Based Malware Classification
Traditional malware detection methods struggle to generalize to obfuscated or previously unseen threats. This paper introduces ThreatVisionAI, a hybrid malware family classification framework that integrates a raw-image CNN, a wavelet-based CNN, and a Vision Transformer ViT to capture complementa...
Enhanced Feature Extraction for IoT Network Intrusion Detection Using GNNs and KAN
Recent advancements in the Internet of Things IoT emphasize the urgent need for advanced network security, as IoT networks feature dynamic topologies, imbalanced traffic, and complex attack patterns. Unlike general IT networks, IoT environments exhibit extreme heterogeneity and sparse topologies...
Apple Security Advisory 06-29-2026-1
Apple Security Advisory 06-29-2026-1 - iOS 26.5.2 and iPadOS 26.5.2 addresses double free, out of bounds access, out of bounds write, and use-after-free vulnerabilities...
CONTRA: Red-Teaming Configurations of Personalizable Agents
Recent tools such as OpenClaw have extended the capabilities of LLM-based agents from simple dialog-based systems to fully autonomous agents. These systems allow personalization of the agent through modifiable internal files and the installation of skills. While this enables deployment in a wide...
Certified Asterisk 20.7-cert11 Security Release
The Asterisk Development Team would like to announce security release Certified Asterisk 20.7-cert11. It addresses 18 security issues...
Gardyn IoT Hub Missing Security Headers
Gardyn IoT Hub is missing security headers that help mitigate clickjacking and cross site scripting...
Certified Asterisk 22.8-cert3 Security Release
The Asterisk Development Team would like to announce security release Certified Asterisk 22.8-cert3. It addresses 20 security issues...