Latest news

Advertisement
  1. Vulnerabilities via oss-security

    CVE-2026-108837: Apache Kylin: Potential computed-column resource exhaustion

    Posted by Li Yang on Oct 15 Severity: low Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Allocation of resources without limits or throttling…

  2. Vulnerabilities via oss-security

    CVE-2026-108833: Apache Kylin: default startup profile miss security settings

    Posted by Li Yang on Oct 15 Severity: low Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Default startup profile miss security settings in Apache…

  3. Breaches via oss-security

    CVE-2026-108823: Apache Kylin: Potential unauthenticated job metadata replacement

    Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Exposure of Sensitive Information to an Unauthorized…

  4. Vulnerabilities via oss-security

    CVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issue

    Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Potential JDBC source configuration validation…

  5. Vulnerabilities via oss-security

    CVE-2026-108776: Apache Kylin: tables/names SparkSQL injection

    Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Improper Neutralization of Special Elements used in an…

  6. Vulnerabilities via oss-security

    CVE-2026-108771: Apache Kylin: unauthenticated broadcast API and polymorphic deserialization

    Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Missing authentication for in-house broadcast and…

  7. Breaches via oss-security

    CVE-2026-108766: Apache Kylin: missing JDBC-config authorization

    Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Missing authorization on jdbc source config update in…

  8. AI Security via Help Net Security

    New infosec products of the week: October 16, 2026

    Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and MCP…

  9. Advertisement
  10. Threat Intel via arXiv cs.CR

    Forensic Analysis of the HackRF One with PortaPack Mayhem Firmware

    arXiv:2610.20647v1 Announce Type: new Abstract: Software-defined radios (SDRs) have become an inexpensive, portable platform for replay attacks, location spoofing and…

  11. Breaches via arXiv cs.CR

    Unmasking the Secret Code: Using Canaries to Show How Masked Context Controls Memorization in SFT

    arXiv:2610.20656v1 Announce Type: new Abstract: Canaries, or synthetic training records containing known secrets, are widely used to assess whether language models…

  12. AI Security via arXiv cs.CR

    Empirical Evaluation of Machine Learning for Cloud Cryptojacking Detection: Effects of Preprocessing and Evaluation Protocols

    arXiv:2610.20658v1 Announce Type: new Abstract: Artificial intelligence (AI) has been widely applied to cloud cryptojacking detection. Classical machine learning models…

  13. AI Security via arXiv cs.CR

    Hybrid DeepXAI Fusion Network for Interpretable Big Data Analytics and Secure Cloud Decision-Making Systems

    arXiv:2610.20661v1 Announce Type: new Abstract: Big data analytics supports modern intelligent systems, but model complexity and limited transparency can undermine…

  14. AI Security via arXiv cs.CR

    CascadeLedger: Counterfactual Auditing of Information and Resource Integrity in LLM Cascades

    arXiv:2610.20668v1 Announce Type: new Abstract: We introduce CascadeLedger, a counterfactual execution-audit framework for budgeted language-model cascades. The protocol…

  15. Threat Intel via arXiv cs.CR

    Foundations of Hardware-Software Leakage Contracts

    arXiv:2610.20754v1 Announce Type: new Abstract: Microarchitectural attacks such as Spectre and Meltdown undermine security by exploiting software-visible side effects of…

  16. AI Security via arXiv cs.CR

    INFUSE: A Unified Surface Benchmark for Indirect Prompt Injection in Agentic Systems

    arXiv:2610.20776v1 Announce Type: new Abstract: LLM-based agents increasingly execute long-horizon, end-to-end workflows involving shell commands, code modification…

  17. AI Security via arXiv cs.CR

    Privacy-Preserving Text Inference for Health-Misinformation Classification and Semantic Retrieval

    arXiv:2610.20796v1 Announce Type: new Abstract: Health-misinformation analysis presents a dual challenge: misleading claims can affect public well-being, while systems…

  18. Threat Intel via arXiv cs.CR

    Performance Characterization of Pulsar's Software-defined Watermark Verifier

    arXiv:2610.20827v1 Announce Type: new Abstract: Pulsar provides the world's most secure PNT service by incorporating a Combinatorial Watermark into its ranging service…

  19. AI Security via arXiv cs.CR

    GhostLock: Learning-Assisted Blind GPS Signal Nullification Without Victim-Side Information

    arXiv:2610.20831v1 Announce Type: new Abstract: The Global Positioning System (GPS) provides critical positioning, navigation, and timing (PNT) services for numerous…

  20. AI Security via arXiv cs.CR

    Thinking in Graphs: Neo4j-Backed Exploit-Chain Reasoning for LLM Penetration-Testing Agents

    arXiv:2610.20902v1 Announce Type: new Abstract: LLM coding agents such as Claude Code and OpenAI Codex can drive penetration-testing tools, but they reason about an…

  21. AI Security via arXiv cs.CR

    From Detection to Decision: Calibration and Deferral for Prompt-Injection Detection

    arXiv:2610.20907v1 Announce Type: new Abstract: Prompt-injection defenses are commonly evaluated as binary detectors, although deployed LLM applications must make…