Latest news
-
Vulnerabilities via Help Net Security
Secure your containers without breaking what works
Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-874: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-873: (0Day) Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-872: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-871: (0Day) Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-870: (0Day) Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this…
-
Vulnerabilities via Zero Day Initiative
ZDI-26-869: MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this…
-
Vulnerabilities via The Hacker News
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing…
- Advertisement
-
AI Security via Help Net Security
Companies going all in on AI could see their strategy backfire
Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven competitive…
-
Threat Intel via Help Net Security
NIST publishes cybersecurity guide for businesses too small to have IT staff
The National Institute of Standards and Technology (NIST) released cybersecurity guidance for small businesses with no paid employees other than their owners. These…
-
Breaches via arXiv cs.CR
InterceptFuzz: Interception-based Stateful Fuzzing of Single-Process Targets
arXiv:2611.03709v1 Announce Type: new Abstract: Stateful protocol implementations are commonly fuzzed by tools that act as a network client and exchange messages with…
-
Vulnerabilities via arXiv cs.CR
Fixed Detectors, Moving Code: How Well Do Static Security Analyzers Hold Up over a Decade of C/C++ Evolution?
arXiv:2611.03742v1 Announce Type: new Abstract: Static application security testing (SAST) tools are often deployed on the assumption that detectors configured today…
-
Vulnerabilities via arXiv cs.CR
LoRA-Patch: Defending Against Backdoored LoRA Adapters via Directional Steering
arXiv:2611.03752v1 Announce Type: new Abstract: Third-party LoRA adapters introduce serious backdoor risks: malicious adapters can maintain normal task performance while…
-
Threat Intel via arXiv cs.CR
The Web Doesn't Sit Still: Adversarial Self-Evolving Attacks on Search Agents
arXiv:2611.03754v1 Announce Type: new Abstract: Large Language Models (LLMs) have shown promise for empowering search agents to tackle complex information-seeking tasks…
-
AI Security via arXiv cs.CR
JevBreak: Your Model, Their Decision
arXiv:2611.03759v1 Announce Type: new Abstract: Restricting what a model can say is often mistaken for restricting an attacker's influence over its decision. An attacker…
-
AI Security via arXiv cs.CR
RuntimeTickets: Source-Grounded Security Obligations for Agent Skills
arXiv:2611.03772v1 Announce Type: new Abstract: Third-party Agent Skills extend what an autonomous agent can do, but a malicious Skill can hide data exposure or output…
-
Threat Intel via arXiv cs.CR
What Malware Actually Does: An Empirical Analysis of Post-Infection Behavior Across Malware Families
arXiv:2611.03774v1 Announce Type: new Abstract: Most malware detection research focuses on identifying whether a file is malicious before it executes. Far less attention…
-
AI Security via arXiv cs.CR
Towards Effective Fuzzing of EDK2 Components
arXiv:2611.03854v1 Announce Type: new Abstract: Securing bootloaders is critical to establishing the trusted computing base of modern systems. TianoCore's edk2, the de…
-
Threat Intel via arXiv cs.CR
Revisiting Elliptic++ for Bitcoin Forensics: Feature Reconstruction and Leakage-Resistant Evaluation
arXiv:2611.04000v1 Announce Type: new Abstract: Elliptic and its address-level extension Elliptic++ are widely used benchmark datasets in Bitcoin forensics, cited by…
-
Vulnerabilities via arXiv cs.CR
On the (Quantum) Communication Complexity of Secure MPC from a Random Oracle
arXiv:2611.04052v1 Announce Type: new Abstract: Information-theoretic MPC among $n$ parties with $t$ corruptions can securely evaluate a circuit $C$ with $O(|C| \cdot…