Latest news
-
Vulnerabilities via Zero Day Initiative
ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker Buildx. User interaction is required to exploit this…
- Advertisement
-
AI Security via Help Net Security
AI-generated changes create review bottlenecks in software delivery
83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #69
Software / fundraising services · California, USA | [PENDING EXPOSURE]
-
Breaches via Help Net Security
Product showcase: GuardOS checks QR links, scans for data breaches, and filters Safari content
GuardOS is an iPhone application that combines device security checks, VPN access, Safari content filtering, QR link scanning, and storage cleanup. It is available…
-
AI Security via arXiv cs.CR
Physical Layer Anomaly Detection via Adaptive Gaussian Mixture Model
arXiv:2610.18946v1 Announce Type: new Abstract: Physical-layer spoofing attacks pose a critical threat to wireless localization systems by manipulating channel state…
-
AI Security via arXiv cs.CR
Limits of Statistical Assurance for Embodied and Agentic AI under Adaptive Adversaries
arXiv:2610.18948v1 Announce Type: new Abstract: Finite safety assessments cannot exclude an adversary that preserves unattacked behavior until certification and…
-
AI Security via arXiv cs.CR
CyberArena: Benchmarking AI Agents in Live Symmetric Attack-and-Defense Combat
arXiv:2610.19005v1 Announce Type: new Abstract: AI agents are demonstrating increasingly strong offensive and defensive cybersecurity capabilities in the real world…
-
AI Security via arXiv cs.CR
Combining Post-Quantum Cryptography and Quantum Key Distribution: Taxonomy, Constructions, Proofs, Standards, Deployments and Open Problems
arXiv:2610.19039v1 Announce Type: new Abstract: Post-quantum cryptography (PQC) and quantum key distribution (QKD) address the quantum threat from opposite directions…
-
AI Security via arXiv cs.CR
Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills
arXiv:2610.19264v1 Announce Type: new Abstract: Agent skills are Markdown documents that a tool-using agent reads as instructions and then acts on with the privileges of…
-
Threat Intel via arXiv cs.CR
TrackShield: An Efficient Runtime Defense Against Availability Attacks on High-Performance Real-Time Multi-Object Tracking
arXiv:2610.19278v1 Announce Type: new Abstract: High-performance camera-based perception pipelines must sustain per-frame real-time budgets on resource-constrained…
-
AI Security via arXiv cs.CR
AutoPoly-HE: Autonomous Design of Polynomial Activations for Privacy-Preserving Encrypted Inference
arXiv:2610.19325v1 Announce Type: new Abstract: Privacy-preserving machine learning has become critical for deploying artificial intelligence in sensitive domains such…
-
Threat Intel via arXiv cs.CR
MMA-SafetyBench: A Benchmark for Multimodal Agent Safety Evaluation
arXiv:2610.19384v1 Announce Type: new Abstract: Multimodal agents increasingly rely on visual interfaces to perceive state and select actions, creating an attack surface…
-
Threat Intel via arXiv cs.CR
Quantum-Resilient Secure Protocol for Decentralized Edge-IoT Peer-to-Peer Energy Trading Systems
arXiv:2610.19491v1 Announce Type: new Abstract: The rise of quantum computing presents substantial challenges to the security of Peer-to-Peer (P2P) energy trading…