- AI risk
- LLMs
VU#166125: Bisheng has authentication bypass vulnerabilities
Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single…
No signal on this page matches that topic.
Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single…
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A…
OpenAI employee charged with planting hidden audio recorders to capture sensitive discussions about AI research and…
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its…
Wiz AI Agents elevate traditional CNAPP, empowering public sector security teams to accelerate security and innovation.
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard…
Police tip hotlines already have their fair share of crank callers. Apparently they now have to contend with crank AI…
Partnership Announcement October 14, 2026 · Cybercrime Intelligence Hudson Rock Partners with TRM Labs as a Launch Data…
Radware has announced Radware Model Context Protocol (MCP) Server Protection, a purpose-built solution designed to help organizations more securely adopt MCP as AI agents gain greater access to…
SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for…
Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude…
Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools…
GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new…
A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the arrest of one of the company’s…
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly…
Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix…
arXiv:2610.14040v1 Announce Type: new Abstract: We discuss a new symmetric-key cipher for digital data encryption. Its…
arXiv:2610.14089v1 Announce Type: new Abstract: Smart glasses are a promising platform for vision-language assistants…
arXiv:2610.14116v1 Announce Type: new Abstract: The OpenClaw Security Attack and Defense Challenge evaluates AI agent robustness through a three-stage defense pipeline: skill file scanning (Stage 1)…
arXiv:2610.14132v1 Announce Type: new Abstract: Sick leave certificates are increasingly delivered as PDF files by…