Latest news
-
Vulnerabilities via Zero Day Initiative
ZDI-26-793: Meta FAIRChem load_and_preprocess_data Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-792: libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-791: Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interaction with this library is…
-
Ransomware via ransomware.live
🏴☠️ Scarlettgroup has just published a new victim : mahsing.com.my
Mah Sing Group is a leading Malaysian property developer specializing in affordable residential and commercial properties, with additional businesses in healthcare and…
-
AI Security via Help Net Security
r/opensource bans AI projects, and solo devs go down with them
Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator…
-
AI Security via Help Net Security
Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes
Google has open-sourced the Elephant-Goldfish Model plugin, an internal tool that makes an AI coding agent write and defend a design document before it touches any code…
-
AI Security via arXiv cs.CR
Fooling LLM Safety Guards into Judging the Wrong Text
arXiv:2610.31695v1 Announce Type: new Abstract: Safety guards check content before an LLM application acts on it, and most paste that content into a plain-text prompt…
-
AI Security via arXiv cs.CR
Omni-UBench: Benchmarking Omni-Modal LLM-based Guardrails Across Safety, Utility, and Reliability
arXiv:2610.31713v1 Announce Type: new Abstract: Advances in Omni-modal Large Language Models (OLLMs) have enabled increasingly seamless human-AI interaction, but their…
- Advertisement
-
Vulnerabilities via arXiv cs.CR
SILMARILS-MV: Information-Theoretically Secure Multi-Verifier Signatures with Dealer-Free Key Issuance and Linear Aggregation for Permissioned Blockchains
arXiv:2610.31814v1 Announce Type: new Abstract: Permissioned blockchains authenticate transactions, votes and quorum certificates with computationally secure signatures…
-
Vulnerabilities via arXiv cs.CR
Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits
arXiv:2610.31831v1 Announce Type: new Abstract: How can an AI agent automatically discover security vulnerabilities in any software repository? Existing approaches use…
-
AI Security via arXiv cs.CR
SEMPRE: Semantic-Aware Protocol Reverse Engineering via Consistency-Driven Joint Optimization
arXiv:2610.31844v1 Announce Type: new Abstract: Protocol reverse engineering (PRE) is essential for understanding undocumented or proprietary communication formats…
-
Threat Intel via arXiv cs.CR
Incomparable Minima in Agent Tool Authorization
arXiv:2610.31914v1 Announce Type: new Abstract: An agent that needs a tool needs authority to call it, and every proposal for governing that authority has to answer one…
-
Vulnerabilities via arXiv cs.CR
Not an Accident: Exploiting Safety Filter Inadequacy in Humanoid Robots
arXiv:2610.31923v1 Announce Type: new Abstract: As humanoid robots move from research laboratories toward deployment in human-centered environments such as homes…
-
AI Security via arXiv cs.CR
Agentic AI Defense: Decode-Time Provenance Binding for MCP
arXiv:2610.31974v1 Announce Type: new Abstract: Agentic AI systems using the Model Context Protocol (MCP) are vulnerable to indirect prompt injection through untrusted…
-
Vulnerabilities via arXiv cs.CR
WADE: An LSTM-Based Anomaly Detection Engine for WebAssembly Applications
arXiv:2610.31984v1 Announce Type: new Abstract: WebAssembly (Wasm) enables near-native performance for web applications through a portable and sandboxed execution model…
-
AI Security via arXiv cs.CR
TRACE: Data-Free Text Reconstruction Attacks against Approximate Unlearning in LLMs
arXiv:2610.31995v1 Announce Type: new Abstract: As large language models (LLMs) face growing demands for data removal driven by regulatory compliance, copyright…
-
AI Security via arXiv cs.CR
SynMark: Semantic-Coordinate Multi-Bit Watermarking during LLM Code Generation
arXiv:2610.32017v1 Announce Type: new Abstract: LLM-generated code is increasingly reused across downstream applications and often undergoes identifier renaming or…
-
Vulnerabilities via arXiv cs.CR
SPA: Structure-Preserving Approximation of Gated Activations under FHE
arXiv:2610.32065v1 Announce Type: new Abstract: Nonlinear activation evaluation remains a major bottleneck in neural inference under fully homomorphic encryption (FHE)…
-
Breaches via arXiv cs.CR
Label-Budgeted Attribute Inference from Protected Features in Edge-Cloud Split Multimodal LLMs
arXiv:2610.32079v1 Announce Type: new Abstract: Edge-cloud split inference runs the early layers of a multimodal large language model (MLLM) on a device and sends…
-
AI Security via arXiv cs.CR
AgentTrace: Execution-Level Fingerprinting of Black-Box LLM Agents
arXiv:2610.32092v1 Announce Type: new Abstract: Verifying the provenance of autonomous LLM agents is a critical security challenge. Existing semantic attribution is…