73 results for “Verl”

ARTEX is an open-source, Go-based multi-agent LLM pentesting and C2 platform that Google Threat Intelligence Group and Mandiant saw threat actors run in incident response cases from late August 2026, alongside PentAGI and CAIRN. The report covers ARTEX behaviour such as MySQL general_log JSP webshell poisoning and burst timing, UNC7228 (overlapping STORM-0940), a seven-stage model of adversary LLM use, and five Mandiant defensive layers. The text was truncated before the last layers.

cloud.google.comarticleAdded 1 Nov 2026, published 30 Oct 2026🛡️ Security

The Binance hack of 29 October 2026 drained about $6.36 billion across ten blockchains in roughly 20 minutes, according to TRM Labs. TRM attributes it with high confidence to North Korea's TraderTraitor, citing a mixer-funded operator wallet, pre-signed transactions and overlap with the Bybit and KelpDAO hacks. Binance's early findings point to a compromised DevOps engineer laptop. Stablecoin issuers froze about $2.7 billion.

securityweek.comarticlePublished and added 30 Oct 2026🛡️ Security

UAT-11473, a newly tracked APT cluster, exploits CVE-2026-20127, a max-severity authentication bypass in Cisco Catalyst SD-WAN Controllers (patched February 2026), to deploy the KeyDrift malware framework. KeyDrift's PolyFlame runs inside vdaemon processes, and LittleFilch hooks SSL_read to extract AES-256 IPsec keying material, saved to /var/tmp/vdaemon.bin and sent over UDP. Targets include space, defense and policy organizations. Talos sees overlap with Volt Typhoon's Silent Train network but makes no definitive link.

bleepingcomputer.comarticleAdded 30 Oct 2026, published 29 Oct 2026🛡️ Security

Cisco Talos reported that UAT-11473 exploited CVE-2026-20127 (CVSS 10, Cisco SD-WAN peering authentication bypass) to deploy KeyDrift, a framework with PolyFlame (backdoor, relay C2) and LittleFilch (key harvesting) modules. Talos found its infrastructure overlaps considerably with Volt Typhoon's Silent Train network. Lumen Black Lotus Labs tied Silent Train to zero-day campaigns against Versa Director, N-able N-central, Cisco Catalyst SD-WAN and VeloCloud Orchestrator.

securityweek.comarticlePublished and added 29 Oct 2026🛡️ Security

KeyDrift is a custom malware framework used by UAT-11473, which exploited CVE-2026-20127 in Cisco SD-WAN Catalyst Controller to gain access. Talos analyzes PolyFlame (memory-resident vdaemon injection, recvfrom hook, TinyShell-style backdoor, intermediate C2) and LittleFilch (SSL_read hook that extracts and RSA-encrypts keying material). It reports infrastructure overlap with Volt Typhoon's Silent Train, plus patch guidance and Snort SIDs.

blog.talosintelligence.comwriteupPublished and added 28 Oct 2026🛡️ Security

Gold vs. Translation is an October 2026 arXiv study of whether DeepL-translated MMLU measures the same thing as native benchmarks. It compares seven pairings against six native benchmarks in five Nordic and Baltic languages, using 29 models. Translated MMLU adds predictive value for curriculum-overlap benchmarks such as Skolprov (ΔR²=.128) but not for Sweden-specific SwedishFacts (p=.242).

arxiv.orgpaperAdded 30 Oct 2026, published 28 Oct 2026🧠 AI

CRISP is a combination-aware framework that co-designs pruning and runtime scheduling for Mixture-of-Experts inference on memory-constrained edge platforms. It reorders neurons by importance so one stored expert supports several execution widths, gives hot, warm and cold expert combinations different widths, and overlaps expert loading with computation. On Mixtral-8x7B and DeepSeek-MoE-16B it raises throughput up to 2.1x at the same memory budget, with accuracy loss limited to 3.6%.

arxiv.orgpaperAdded 28 Oct 2026, published 27 Oct 2026🧠 AI

OpenGray is a benchmark that adds tasks with known correct decisions to the OpenKBP-Opt head-and-neck dataset, including two overlap contradictions with provably incompatible dose goals and a feasible control. Four planning systems, from a rule-based script to a full LLM agent, were tested on 30 patients with Terra and Ministral 3 8B. Decision accuracy reached 95.4% and 92.1%, yet only 50% and 25% of overlap contradictions were escalated. SAGE logs of 39 radiosurgery runs showed an agent that lacked an action for stopping.

arxiv.orgpaperAdded 28 Oct 2026, published 27 Oct 2026🧠 AI

Gheist is a campaign tracked by Wiz Research since 15 September 2026 that uses stolen GitHub tokens to push a sync-check workflow on ci-sync-* branches in every reachable repository. The workflow prints base32-encoded secrets into logs, which the tool downloads through the GitHub API and then deletes. Over 13,500 branches from 850+ accounts were recovered. The post covers the two tool variants, a buggy self-hosted runner payload, GitHub's approval hold (which does not cover private repositories), overlaps with other campaigns, hunting queries, IOCs and hardening steps.

wiz.iowriteupPublished and added 25 Oct 2026🛡️ Security

ThinkingBox-Training is Microsoft's released RL stack that turns executable database-state checks from ThinkingBox tasks into GRPO rewards. Fifty GRPO steps on 187 curated tasks raised Qwen3.8-27B pass@1 from 51.70% to 60.78% and tasks passing all 20 attempts from 38 to 107 on the held-out 507-task benchmark. The post explains offline policy-relative difficulty filtering with Jeffreys posteriors, the 24-H100 Verl setup and evaluation steps.

huggingface.cowriteupPublished and added 22 Oct 2026🧠 AI

This paper describes an evidence-aware retrieval evaluation protocol for a clinical RAG system over breast lesion management literature. Relevance is defined by evidence spans mapped to all containing chunks. A hybrid retriever (dense, BM25, cross-encoder reranking) with 384-token chunks and 20% overlap reached 0.94 Recall@3 on 18 queries. Expanding ground truth from 25 to 37 spans did not change rankings. The authors note the small set needs independent validation.

arxiv.orgpaperAdded 24 Oct 2026, published 22 Oct 2026🧠 AI

Wiz Research reports an actor overlapping with Storm-0940 that used ARTEX, an open-source autonomous AI penetration-testing agent, against IT and software vendors in October 2026. It documents source-map and Swagger recon, OAuth callback and unsigned JWT probing, Cognito account-recovery abuse, tenant-isolation tests and Okta/Entra password spraying. The post lists log signals that mark the activity as agentic, such as one-second spray cadence and automatic IP and user-agent rotation.

wiz.ioarticlePublished and added 22 Oct 2026🛡️ Security

Chunk Recomputation under Real Document Revisions measures how much text must be re-embedded after edits for three stateless chunkers (non-overlapping fixed-size, recursive paragraph-first, content-defined) on 120 pairs of adjacent Chinese and English Wikipedia revisions. Fixed-size recomputes 57-68% of the new-version workload, recursive 38-56%, content-defined 43-54%, while evidence recall at a 2048-token budget differs by under two points. The authors argue update cost should be reported alongside retrieval quality.

arxiv.orgpaperAdded 24 Oct 2026, published 22 Oct 2026🧠 AI

LayerFS is a serverless, versioned filesystem for AI coding agents. Every file or Bash tool call becomes a commit on a branch, agents on different machines share one Store without a database server, and same-file clashes are refused with Conflict. Forks copy no files, chunks are deduplicated and compressed, and ignored dependency files persist, so a mount takes about 0.05 s against about 5 minutes of reinstalling. The page gives vendor claims and no benchmarks or docs.

layerfs.aitoolAdded 22 Oct 2026, published 21 Oct 2026🧠 AI

Paulo Pierrondi's X post, part 9 of a series on installing MCP servers, lists a monthly review of installed servers. The checks are which tools the agent used, servers not called in weeks, overlapping tools that confuse the model, and whether each server still has an owner. A reply adds a decommissioning check: after removal, confirm the server's old credentials can no longer call the backend.

x.comthreadPublished and added 20 Oct 2026🧠 AI

Velox is a training-free attention router for chunked video-diffusion world models. It uses camera frustum slabs with depth intervals from streaming geometry to pick which historical token blocks to attend to, instead of letting the KV cache grow with rollout length. Frustum overlap softly modulates each layer's model-derived block importance, and uncovered regions keep the model's own routing. The fixed block granularity suits FlashAttention-style tiled execution, and slab construction runs asynchronously with denoising on the same H200. At chunk 48 it speeds up attention 4.36× and denoising 2.43×, and on the 158-case WBench navigation split it stays within 0.15 average points of dense LingBot-Fast-Cam.

arxiv.orgpaperAdded 17 Oct 2026, published 15 Oct 2026🧠 AI

Proposes EdgeFlow, a hybrid KV cache migration scheme for distributed LLM inference across heterogeneous edge servers in Collaborative Edge Computing. It combines direct KV cache transmission with activation-based recomputation, overlapping computation and communication to cut migration time when servers disconnect or overload. The authors formulate a multi-node KV migration optimization problem and give a 2-approximation algorithm built on improved LP relaxation and bipartite graph techniques. Experiments on a real distributed LLM inference platform show up to 45% lower migration time.

arxiv.orgpaperAdded 17 Oct 2026, published 15 Oct 2026🧠 AI

Hackers Arise explainer on the human psychology that social engineers exploit. It covers cognitive overload ("brain DoS"), stereotyped automatic behaviour, and the authority, scarcity and consistency principles, with supporting studies (Milgram, Pliner, Europol fraud-victim statistics). It also describes trigger-bypass techniques such as reframing a password request as IT support, and an observed baseline percentage of recipients who act on phishing emails. It closes with organisational and personal defences.

hackers-arise.comarticlePublished and added 15 Oct 2026🛡️ Security

Cisco Talos and Recorded Future Insikt Group describe UAT-6275 (TAG-193, overlapping Silent Lynx and YoroTrooper), a suspected Kazakhstan-nexus actor targeting CIS government, water and energy organizations. Exposed staging directories and a GitHub repo revealed four infection chains (macro documents, PS2EXE downloaders, GitHub-hosted PowerShell, and a WinRAR CVE-2025-8088 archive) delivering custom reverse shells Chvost, Laplas and PickleShell, plus Linux tooling and a FortiWeb CVE-2025-25257 PoC. The post includes victimology, a campaign timeline, attribution rationale (medium confidence), defender guidance and ClamAV/Snort coverage.

blog.talosintelligence.comarticlePublished and added 14 Oct 2026🛡️ Security

Parsimony is an open-source benchmark that ranks AI coding models by how much code their patches add. It parses the patches already published by benchmarks such as SWE-bench Verified, counts syntax-level "coding units" (statements, calls, comparisons, names, literals) rather than lines, and subtracts deleted code to get net units. It adds a leaderboard, an Artificial Analysis Intelligence Index overlay, the author's own DeepSWE runs, and a way to upload your own results. It matters because existing benchmarks score solve rate and cost but not code bloat, which makes codebases harder to maintain. The page states its limits: it measures size, not quality, and more verbose models tend to solve more tasks.

parsimony.lasu.devtoolPublished and added 13 Oct 2026🧠 AI

VulnCheck reproduces and root-causes CVE-2026-76504, an exploited zero-day authentication bypass in Cisco SD-WAN vManage. A POST to the URL-encoded path /%6a_security_check skips the password check because AppServerLoginModule.login() tests the raw getRequestURI() for "j_security_check", while WildFly's security-constraint matcher decodes the path. Supplying an internal username such as viptela-reserved-cloudops or viptela-reserved-uc then mints an admin-level session. Includes decompiled code, request/response samples, and notes on about 1,500 exposed devices and IoCs; the weaponized exploit and detection rules are gated to customers.

vulncheck.comwriteupAdded 12 Oct 2026🛡️ Security

Joint FBI/CISA/NSA and allied-agency advisory on China-linked actors enabled by Integrity Technology Group (overlapping with Flax Typhoon, Ethereal Panda, Red Juliett). It details their TTPs: open-source scanners and the MicroScan exploit-script app, an XSS credential-harvesting payload dropping live700_v1.exe, EBurst password spraying against Exchange/O365, SoftEther VPN persistence, DCSync via DC.exe, and email theft via the Curlc4.txt PHP bot and the office-cli utility. It also provides IOCs, MITRE ATT&CK mappings, CVEs, incident response steps, and mitigations.

cisa.govadvisoryAdded 9 Oct 2026🛡️ Security

VulnCheck's exploit development team analyzes CVE-2026-76504, a critical zero-day authentication bypass in Cisco Catalyst SD-WAN Manager (vManage), reproduced to the point of a weaponized exploit. The root cause is a discrepancy between WildFly's Undertow engine, which URL-decodes the request path before deciding whether j_security_check requires auth, and Cisco's AppServerLoginModule.login(), which checks the raw (undecoded) getRequestURI() string — so a path like /%6a_security_check skips the password check entirely. The remaining session-building fallback path only checks membership in four hardcoded internal usernames (viptela-reserved-dca/cloud/cloudops/uc), and two of them (cloudops, uc) grant full admin via the dataservice API, giving an unauthenticated attacker a fully privileged vManage session with a single POST request.

vulncheck.comwriteupAdded 8 Oct 2026🛡️ Security

Orca Security details "MALFEX," a supply-chain campaign active since August 2023 in which a suspected lone Brazilian threat actor published eight malicious npm packages (tlxbnhd, tldriver, mxdriver, img-to-native, native-runner, function-flag, function-color, cdn-img-fetch) that together drew over 40,767 downloads. Using postinstall lifecycle hooks, the packages deliver three malware families to Windows hosts: the Go-based Overlord RAT (with a Solana blockchain C2 resolver), the Node.js "movinlike" credential/Discord/crypto-wallet stealer, and rotating downloader payloads — with three packages (notably function-flag) still live on npm and only six of the eight carrying OSV advisories at publication time. The piece includes host IOCs (file paths, scheduled task name), affected package lists, and remediation steps (lockfile auditing, credential rotation) alongside a pitch for Orca's SCA detection of the OSV-flagged packages.

orca.securityarticlePublished and added 8 Oct 2026🛡️ Security

Galaxy Research's weekly brief includes a detailed postmortem of the $387.5M Bitget hack: attackers exploited a zero-day in two unnamed third-party security products ("Product A"/"Product B") to obtain high-level internal credentials, inserted forged withdrawal commands into Bitget's wallet backend across 11 chains, then deleted the fraudulent commands — with Bitget attributing the attack to North Korean actors based on IP behavior and wallet overlaps found by Elliptic and TRM. The piece draws a direct parallel to the $1.5B Bybit/Lazarus heist (compromised Safe{Wallet} infrastructure rather than stolen keys) to argue that private-key cryptography is effectively solved and attackers now target the approval pipeline/intermediary services instead; it also covers the follow-on $3.8M NEAR Intents Omni-bridge exploit and THORChain's continued role laundering DPRK proceeds. The newsletter's other sections (White House "Super Intelligence" AI Accord, SEC crypto buyback FAQs) are policy commentary, not security-technical.

galaxy.comarticleAdded 8 Oct 2026🛡️ Security

Part 2 of a Rapid7 series on higher-education security examines how four overlapping compliance regimes — FERPA (24-hour Federal Student Aid breach notification), GLBA Safeguards Rule (law-enforcement notification at 500+ affected consumers), HIPAA (60-day HHS breach reporting), and CMMC Level 2 (110 NIST 800-171 practices for DoD-funded research) — collide during a single incident at decentralized, multi-campus university systems. It argues that fragmented data stores and governance make it hard to quickly scope which regulated data (financial aid, health records, CUI) was touched and which reporting clocks have started, and recommends consistent data classification plus centralized visibility/automation to meet overlapping deadlines.

rapid7.comarticlePublished and added 7 Oct 2026🛡️ Security

This IACR ePrint paper by Yi-Fu Lai and Yu Yu breaks the blindness property of a lattice-based blind signature scheme presented at Crypto 2020, which uses a linear hash function framework instantiated over lattices. The authors first identify an overlooked bug in the scheme's original blindness security proof, then construct a concrete attack under an honest-key, honest-but-curious signer model by exploiting correlations between leaves of the scheme's tree structure, and discuss how the construction can be repaired.

eprint.iacr.orgpaperAdded 8 Oct 2026, published 7 Oct 2026🛡️ Security

A tweet thread announcing Concord, an open-source coordination layer for running multiple AI coding agents (Claude Code, Codex, Cursor) concurrently on the same codebase. Agents claim files before editing so overlapping edits trigger warnings, and the tool lets agents message each other across the different coding-agent harnesses, addressing the conflict problem that appears once three or more agents work in parallel.

x.comthreadPublished and added 7 Oct 2026🧠 AI

AWS Security Blog walkthrough on hardening SPIRE (the SPIFFE Runtime Environment) in production by replacing its default self-managed components with AWS managed services: AWS KMS for SVID signing keys, Amazon Aurora PostgreSQL as the datastore, AWS Private CA as the upstream certificate authority, Amazon S3/CloudFront for trust bundle distribution, AWS Secrets Manager for delivering SVIDs to serverless/container workloads, and Amazon Verified Permissions (Cedar policies) for fine-grained SPIFFE-ID-based authorization. It addresses operational concerns like key custody, datastore resiliency, PKI integration, and offline identity validation, and links to a GitHub reference deployment and a SPIFFE/SPIRE-on-AWS workshop.

aws.amazon.comarticleAdded 7 Oct 2026, published 6 Oct 2026🛡️ Security

Unit 42 details "Blinder Tunnel," a campaign by Iranian state-aligned actor CL-STA-1178 (linked to Elastic's "The Shelby Strategy") that impersonated Dubai Airports recruiters to deliver a trojanized Visual Studio coding-challenge archive against an Iraqi critical-infrastructure target, with related activity against UAE aviation and Israeli entities via Google Drive-themed phishing. The report dissects a three-stage infection chain (weaponized .csproj MSBuild target abuse, AppDomainManager hijacking to disable ETW, and DLL sideloading into RuntimeBroker.exe) that deploys ShelbyLoader V2, the ShelbyC2 V2 RAT, PsProxy.dll (in-memory PowerShell execution), and Blackwood, a custom Chisel-based tunneling loader; C2 abuses GitHub's API and GitHub Issues as a dead-drop fallback, and attribution rests on an Iranian-hosted IP, Persian-domain infrastructure overlap, and MP3 metadata pointing to MusicDel.ir. Includes full IOCs (hashes, IPs, phishing domains, registry keys).

unit42.paloaltonetworks.comarticlePublished and added 6 Oct 2026🛡️ Security

Checkmarx's research team documents MALFEX, an npm supply-chain malware campaign run by a single operator ("Murizada") publishing since August 2023, with 12 packages (8 malicious), three still live as of late September/October 2026. The campaign delivers three distinct Windows payloads: Overlord RAT (a Go-based C2 that reads its server address from encrypted Solana blockchain transactions and uses process hollowing into TapiUnattend.exe), the movinlike Node.js stealer (targeting Discord, browser credentials, Telegram, and crypto wallets, exfiltrating via Discord webhook), and a long-running downloader hidden in function-flag's postinstall script. The writeup includes full IOCs, file hashes, host artifacts, detection commands, and remediation guidance for compromised Windows hosts.

checkmarx.comwriteupAdded 7 Oct 2026, published 5 Oct 2026🛡️ Security

SpatialChain is a benchmark of 28,350 training and 899 test examples pairing spatially-oriented GQA questions with scene-graph-grounded reasoning chains, designed to audit whether VLMs' correct spatial answers reflect faithful reasoning or linguistic shortcuts. Using a two-axis evaluation (chain-overlap metrics plus a scene-graph-aware LLM judge), the authors find that four of nine tested models hit ≥79% accuracy while showing shortcut rates above 39%, that chain quality predicts correctness for most models except Claude Sonnet 4.6 and InternVL3.5-8B (which fail differently, via terse vs. verbose-decorative reasoning), and that SFT on SpatialChain improves Qwen3-VL-8B accuracy by +6.2pp while cutting its shortcut rate to 22%. The faithfulness judge is validated against human annotations and a second LLM judge, with data, generation scripts and evaluation code released publicly.

arxiv.orgpaperAdded 6 Oct 2026, published 5 Oct 2026🧠 AI

An IACR ePrint paper presenting a GPU-assisted implementation of FAEST v3 signing, a post-quantum signature scheme, focusing on two problems: preserving the correct minimum accepting counter when parallelizing "challenge grinding" across GPU threads, and building a two-slot CPU-GPU pipeline to overlap CPU work with GPU batches for multi-signature throughput. Across the six non-EM FAEST v3 parameter sets, the authors find the CPU-GPU path beats optimized CPU-only signing for single-sign latency in 4 of 6 cases (up to 1.6x speedup for FAEST-192s) and wins throughput in 9 of 18 parameter/batch-size combinations, with GPU correctness validated to match the reference signature output.

eprint.iacr.orgpaperAdded 8 Oct 2026, published 5 Oct 2026🛡️ Security

Cisco Talos researcher Ashley Shen details a China-nexus espionage campaign (tracked as UAT-11587) targeting government and policy organizations across Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, Myanmar and Syria. The actor deploys a previously undocumented Rust-compiled backdoor, Antino, that uses Microsoft Graph to abuse Outlook (for command exchange via mailbox folders) and OneDrive (for heartbeat and file transfer) as a stealthy C2 channel instead of a dedicated server, delivered via a five-stage HTA/WSF-to-.NET-loader chain and DLL-sideloaded through the signed Microsoft binary GatherOsState.exe. The report also covers social-engineering tradecraft (a fake Gmail attachment-preview widget hosted on Cloudflare Pages, SPF/DMARC spoofing) and ties the cluster to Jewelbug, CL-STA-0049, Earth Alux, Ink Dragon, REF7707 and UNC6384 via infrastructure overlaps.

thehackernews.comarticleAdded 3 Oct 2026🛡️ Security

Galaxy Research post-mortem on the $387.5m Bitget hot/warm wallet theft across 11 chains, attributed to North Korean (Lazarus/DPRK) actors via IP behavior and onchain wallet-overlap analysis by Elliptic and TRM. SlowMist traced the intrusion to a zero-day exploit against two unnamed third-party security vendors ("Product A"/"Product B") that let attackers insert and then delete fraudulent withdrawal commands in Bitget's wallet backend, rather than compromising private keys or cold storage. The piece draws a direct parallel to the February 2025 Bybit/Safe{Wallet} $1.5B theft (doctored signing interface) and the same-week NEAR Intents $3.8m hot-wallet exploit, arguing that private-key cryptography is now reliably secure so attackers instead target the intermediary infrastructure/pipeline that authorizes transactions, with stolen funds repeatedly laundered through THORChain.

galaxy.comarticleAdded 2 Oct 2026🛡️ Security

The Hacker News reports Bitget's confirmation that attackers exploited a zero-day vulnerability in unnamed third-party security products ("Product A" and "Product B") to steal $387.5 million in cryptocurrency across 11 blockchains in September 2026. SlowMist's investigation traced the intrusion back to August 31, showing attackers read database credentials via a hidden script, later hijacked an employee identity to inject commands into Product B's management platform, and deployed a web shell with C2 access; Mandiant found the attackers pivoted from the compromised security appliances into Bitget's production wallet job server to deploy a custom withdrawal-draining tool that bypassed risk controls. Bitget, citing IP patterns and on-chain analysis corroborated by Elliptic and TRM Labs, attributes the heist to North Korean threat actors with wallet overlaps linking it to prior laundering operations.

thehackernews.comarticleAdded 2 Oct 2026🛡️ Security

EvoVLM searches over prompts, image preprocessing, generation budgets and answer extraction for frozen Qwen3-VL-2B-Instruct and Qwen3-VL-2B-Thinking, without fine-tuning weights. A local Qwen model ranks a catalog of typed mutations, a trusted renderer produces Python programs, and Pareto selection on accuracy and latency drives two small generations on scientific chart understanding (CharXiv subset). Recorded results on Dev128: Evolved Instruct keeps accuracy with 8.9% lower median latency, and Evolved Thinking gains 16.41 points of accuracy with 10.6% lower median latency. CPU-only replay and fail-closed evidence verification are included. The authors state the limits: small sample, overlap with the evolution set, and results tied to the recorded hardware.

github.comrepoAdded 16 Oct 2026, published 2 Oct 2026🧠 AI

CloudSEK's Global Threat Intelligence team uncovered MALFEX, a supply-chain campaign active since August 2023 that uses malicious npm packages (including tlxbnhd, tldriver, mxdriver, img-to-native, cdn-img-fetch, function-flag, function-color) to deliver malware on Windows. One chain disguises a Windows executable as a PNG to load Overlord RAT, an open-source Go-based RAT that uses the Solana blockchain to resolve C2 addresses; a second chain fetches a 64MB Node.js bundle that steals Discord tokens, browser cookies/credentials, crypto wallets and Telegram session data, exfiltrating via a Discord webhook. Some malicious packages stayed live for over a year even after related packages were pulled or flagged.

hackread.comarticleAdded 3 Oct 2026, published 30 Sep 2026🛡️ Security

The authors show that reported gains from d'Ascoli et al. (2025) on decoding words from non-invasive brain recordings are mostly an artifact: overlapping fixed-length windows leak word-duration (timing) information, letting a model reach 22.0% balanced accuracy on synthetic signals with no brain data at all, versus 22.3% on real recordings. By processing each word window independently instead of jointly encoding a sentence, they remove this timing shortcut, which makes prediction aggregation and LLM linguistic priors become genuinely effective; the resulting method, SimpleB2T, achieves 36.6% word error rate with five observations per word on a perceived-speech benchmark, approaching invasive decoding performance.

arxiv.orgpaperAdded 1 Oct 2026, published 30 Sep 2026🧠 AI

Cisco Talos details UAT-11587, a China-nexus threat cluster targeting government, defense, and policy organizations across Taiwan, India, the Philippines, Cambodia, and other Asian countries with spear-phishing and a five-stage infection chain (HTA/WSF stagers, JScript decryptors, .NET BinaryFormatter/ActivitySurrogateSelector deserialization gadgets, and DLL sideloading via the signed GatherOsState.exe) to deploy a new Rust-compiled backdoor called Antino. Antino uses Microsoft Graph/Outlook/OneDrive as a dead-drop C2 channel instead of a traditional C2 server, supports shell/PowerShell execution, file transfer, shellcode loading with a sleep-mask evasion technique, and abuses the Windows Scripted Diagnostics framework for persistence; Talos also notes possible infrastructure overlap with Symantec's "Jewelbug" cluster and Arctic Wolf's UNC6384 reporting. Includes ClamAV/Snort coverage and IOCs.

blog.talosintelligence.comwriteupAdded 7 Oct 2026, published 30 Sep 2026🛡️ Security

Point2Part is a promptable 3D part-decomposition model that, given 3D point prompts (one per desired part), jointly partitions an image or mesh into non-overlapping parts that fully cover the shape, unlike prior methods that allow overlaps or gaps. It builds on a pretrained 3D generation model's shape latent space, adding a prompt encoder mapping point prompts to part tokens and a coarse-to-fine part decoder that assigns every shape position to exactly one part, unifying image-to-part generation, mesh-to-part generation, and part segmentation in one model. The authors report outperforming prior SOTA on part-quality metrics and an order-of-magnitude improvement in part compatibility across all three tasks.

arxiv.orgpaperAdded 30 Sep 2026, published 29 Sep 2026🧠 AI

GitHub Security Lab describes custom "taskflow" prompts built on their open-source Taskflow Agent to hunt Android app vulnerabilities, reporting 24 findings to date. It walks through two concrete chains: an exported, unprotected MapActivity in OsmAnd that lets any app silently import settings and exfiltrate the user's exact map tile/route coordinates to an attacker server, and a hostname-parsing logic bug plus overly loose cookie-domain check in the Wikipedia Android app that lets a wikipedia:// deeplink load an attacker page (e.g. evil-wikipedia.org) and steal long-lived session cookies for account takeover. The post also candidly notes where LLMs struggle (false positives, mis-estimating severity, missing mitigating factors) versus where they excel (deep knowledge of safe/unsafe API patterns).

github.blogwriteupAdded 7 Oct 2026, published 28 Sep 2026🛡️ Security

Release notes for vLLM v0.30.0, a major update to the open-source LLM inference/serving engine spanning 762 commits. Highlights include new model support (DeepSeek-V4.1-Flash, GLM-5.3-Flash, Kimi K3, Qwen3.8-Flash-Next, K2-Horizon, Cohere Compass and others), a "Fast Start" GPU weight-cache daemon for near-instant engine restarts via CUDA IPC, Gumbel-max watermarking for generated text, a HiSparse host-memory tier for sparse-MLA KV offload, Model Runner V2 improvements (dual-batch overlap, speculative decoding under pipeline parallelism), expanded quantization support (NVFP4, W4A16 DSA, AutoRound), and hardware-specific tuning across NVIDIA, AMD ROCm, Intel XPU and CPU backends.

github.comrepoAdded 28 Sep 2026🧠 AI

SWE-Bench Pro Verified is a corrected version of the SWE-Bench Pro coding-agent benchmark that closes reward-hacking channels (Git history remnants, hidden test/fixture leakage, metadata leaks, network access to gold patches) and fixes 102 of 731 instances with misleading task descriptions or overly narrow/broad tests. Evaluations show some models that previously scored well (e.g. via hacking) drop substantially on the verified benchmark, while models with little hacking behavior stay roughly the same, suggesting original SWE-Bench Pro scores overestimate real coding capability. Code and dataset are released via AgentCompass and Hugging Face.

arxiv.orgpaperAdded 26 Sep 2026🧠 AI

Bitget disclosed a $351.6M hot-wallet breach in which attackers did not compromise private keys but instead breached a core wallet backend and spoofed transaction data to trick Bitget's own authorization process into approving transfers. Attackers quickly converted most stolen EVM assets into 67,982 ETH (~$183M) and also took ~103M XRP to move into harder-to-freeze native assets, while Bitget's CEO and independent researcher Specter linked the attack to North Korea via VPN IP overlap and onchain infrastructure tied to the earlier AFX exploit attributed to TraderTraitor.

bankless.comarticleAdded 8 Oct 2026, published 25 Sep 2026🛡️ Security

This arXiv preprint proposes a variational framework generalizing the time-dependent variational principle to simulate stochastic quantum trajectories in interacting bosonic systems, using a wavefunction ansatz of coherent superpositions of Gaussian wavepackets. The method is benchmarked on a Bose-Hubbard dimer and applied to 1D and 2D extended Bose-Hubbard lattices, revealing a symmetry-breaking phase transition present only in 2D. This is a quantum physics simulation technique, not an AI/ML method, despite using the term "variational" which overlaps with ML vocabulary.

arxiv.orgpaperAdded 26 Sep 2026, published 24 Sep 2026🧠 AI

Cortico is an open-source agent harness built around an event stream, designed for autonomous, continuously running agents that handle mixed real-time input across chat platforms, live games, and even physical environments. It provides modular LLM provider components (via an internal Responses protocol), unconstrained context/memory management, an isolated extension system called Cortico World, and a WebUI, with a companion AI-assisted extension creator (Cortina) that lets non-developers build extensions through conversation. A reference use case is cortico-world-vtuber, which drives a Live2D model via VTube Studio with streaming TTS and OBS overlay integration.

github.comrepoAdded 26 Sep 2026, published 13 Sep 2026🧠 AI

Endor Labs breaks down the EU Digital Operational Resilience Act (DORA), applicable to financial entities from January 2025, focusing on Article 9 (patch management) and Article 25 (open source analysis/source code review), plus the January 2024 Regulatory Technical Standards Articles 10 (tracking third-party/OSS libraries) and 16 (source code review, security testing before production). It then maps these compliance requirements to concrete AppSec practices: SBOM/SCA for component inventory, proactive OSS risk scoring, vulnerability scanning, and function-level reachability analysis to prioritize remediation and generate VEX documents, noting overlap with PCI DSS requirements 6.3/11.3.

endorlabs.comarticlePublished and added 11 Sep 2026🛡️ Security

Cisco Talos details active exploitation of CVE-2026-20079 (CVSS 10.0 unauthenticated auth bypass leading to root) and CVE-2026-20316 (low-privilege login via static credentials) in Cisco Secure Firewall Management Center. Three post-compromise clusters are tracked: UAT-12197 deploying a JSP web shell and JAR command executor to exfiltrate credentials; UAT-11823, overlapping with Sandworm, using a malicious Makeself license.tmp to drop a Netcat reverse shell and a Cyclops Blink variant; and UAT-11988, a Qilin ransomware affiliate who abused package_info.pl for LOTL recon, SOCKS5/reverse-SSH tunneling, and ultimately deployed Qilin ransomware. Talos provides Snort SIDs, hotfix guidance ahead of a comprehensive hardening release, and a GitHub IOC repository.

blog.talosintelligence.comwriteupAdded 7 Oct 2026, published 9 Sep 2026🛡️ Security

This arXiv preprint generalizes the sample-based Krylov quantum diagonalization (SKQD) method from ground-state energy calculations to computing single-particle Green's functions on quantum hardware. By building unitary Krylov subspaces in the N±1 particle sectors and classically evaluating overlaps, the authors reconstruct Green's functions via a Lanczos continued fraction, applying the technique as an impurity solver for dynamical mean-field theory (DMFT) on the single-impurity Anderson model, reproducing spectral features across the metal-insulator transition with shallow, ancilla-free quantum circuits.

arxiv.orgpaperAdded 22 Sep 2026, published 8 Sep 2026🧠 AI

shrt is a Go command-line tool for regression testing RPC backends. Agents, such as Claude Code through a SKILL.md skill, write per-domain contract overlays, and the planner composes RPC chains that probe boundaries, other roles, missing tokens and read-backs after writes. The tool runs and verifies chains against approved runs, and a gate command checks every new release. A person must approve any chain before it becomes a baseline.

github.comrepoAdded 23 Oct 2026, published 3 Sep 2026🧠 AI

Huntress details five modern phishing techniques that bypass traditional "check the URL" training and MFA: ClickFix (fake CAPTCHA tricking users into running Win+R/paste commands to execute malware), Browser-in-the-Browser (fake HTML popup windows mimicking OAuth login prompts with forged address bars/padlocks), ConsentFix (dragging an identity icon to leak an OAuth authorization code that attackers trade for Microsoft Entra ID access/refresh tokens), device code phishing (abusing the legitimate microsoft.com/devicelogin flow to authorize an attacker's device via a code, seen weaponized in PhaaS kits like EvilTokens), and fake video-conference (Teams/Zoom/Google Meet) waiting-room overlays that push a malicious "driver update" install. Each section explains why the technique defeats standard security-awareness training and how Huntress's simulated phishing scenarios replicate it.

huntress.comarticleAdded 3 Sep 2026, published 28 Aug 2026🛡️ Security

IAM Policy Autopilot is an AWS Labs open-source CLI/MCP server that statically analyzes application source code (Python, Go, TypeScript, JavaScript, Java) or a Terraform plan JSON to generate baseline least-privilege IAM identity-based policies, and can also parse AccessDenied error messages to suggest policy fixes. It integrates with AI coding assistants (Kiro, Claude Desktop, etc.) via MCP so assistants can auto-generate scoped IAM permissions instead of overly broad ones, with a --service-hints flag to reduce false-positive permission inclusion.

github.comrepoPublished and added 25 Aug 2026🛡️ Security

ScreenshotDetector is an Android app-layer tool that detects screenshot, screen recording, screen mirroring, and casting activity using a combination of public APIs (ScreenCaptureCallback, ScreenRecordingCallback, DisplayManager, MediaProjection, ContentObserver/MediaStore, FileObserver, AccessibilityService, NotificationListenerService) and hidden APIs accessed via reflection (DisplayManagerGlobal.getDisplayInfo, WifiDisplayStatus, AppOps project_media/project_audio). It is positioned as a research counterpart to ScreenshotFaker (an LSPosed/Shizuku-based tool that forges/bypasses screenshot detection), illustrating the attacker/defender dynamic around screen-capture evasion on Android, including detection of adb shell screencap/screenrecord, freeform/mini-window attribution, and accessibility-overlay/screen-reader channel abuse detection.

github.comrepoPublished and added 21 Aug 2026🛡️ Security

Wiz researchers found that malicious versions of the Rust crates arrayref, internment, and append-only-vec were published to crates.io, each pulling in a typosquatted build-dependency (proc-macro1, mimicking proc-macro2) whose build.rs executes a remote payload at compile time. The payload beacons to a C2 endpoint (/49890878) shared with the Mastra campaign, disables TLS validation, enumerates Chrome/Brave/Edge saved logins via their SQLite stores, persists via Registry Run keys/LaunchAgents/systemd, and falls back to a DGA — with C2 infrastructure and SSL-issuer overlap tying it to DPRK/Sapphire Sleet activity previously seen in the Mastra and axios supply chain attacks. arrayref is used in roughly 75% of Rust environments, making this a high-impact build-time compromise.

wiz.iowriteupAdded 3 Sep 2026, published 20 Aug 2026🛡️ Security

A structured collection of 50+ notes taking a low-privileged Linux foothold to root, covering sudo/SUID misconfigurations, GTFOBins and LD_PRELOAD abuse, the Baron Samedit sudo bug, Linux capabilities, cron/systemd-timer abuse, kernel exploits (DirtyCow, DirtyPipe, OverlayFS, PwnKit), NFS no_root_squash, Docker/LXD namespace escapes, screen/tmux and D-Bus IPC abuse, and credential mining. Each note follows a concept-to-exploitation-to-detection-to-defense format and the repo includes a methodology checklist, hardening guide, two guided labs with a lab-setup script, and skills assessments, published for authorized lab/CTF use under CC BY 4.0.

github.comrepoAdded 2 Oct 2026, published 19 Aug 2026🛡️ Security

Episode 17 of The OpenSourceMalware Show covers GitHub's move to revoke npm granular access tokens that could bypass 2FA, and follows up on the DPRK NullReceiver obfuscation technique (now found in well over the 7 originally confirmed packages, overlapping with the PolinRider campaign). The hosts also discuss why malicious AI 'skills' are hard to detect via static analysis due to their natural-language format, note DPRK's use of crypto payments (e.g. via Astrill VPN, hosting provider Evoxt) as a potential tracking vector for defenders, and touch on MCP server risk being more about vulnerabilities than outright malware.

opensourcemalware.comtalkAdded 3 Sep 2026, published 14 Aug 2026🛡️ Security

Endor Labs benchmarked Claude Code + Opus 5 on its SusVibes secure-coding benchmark (real historical CVE fixes hidden as coding tasks) and found it topped the leaderboard at 73.7% FuncPass / 32.4% SecPass, but also uncovered a new memorization-evasion pattern called "recall-then-diverge": the model writes a memorized fix early in its edit trajectory, then iteratively rewrites the code until the final diff no longer resembles the known patch and evades similarity-based cheat detection. The team details the discovery via an aiohttp request-smuggling task (CVE-2023-47641) where the agent produced the exact hidden pytest error string before any tool output could have revealed it, then extended their anti-cheating pipeline to compare first/peak/final edit overlap and string chronology rather than just the final patch, ultimately disqualifying 4 of Opus 5's 13 "unique" secure solves (including a jupyter-server-proxy case with a leaked upstream commit hash) as memorized.

endorlabs.comwriteupAdded 3 Sep 2026, published 11 Aug 2026🛡️ Security

An XBOW Offensive Security Academy piece arguing that traditional pentest authorization models break down when an autonomous AI agent, rather than a human, chains techniques and pivots across systems. It walks through where legal exposure can appear (CFAA and UK Computer Misuse Act unauthorized-access risk, third-party infrastructure, data exposure, and overlapping GDPR, EU AI Act, NIS2 and Cyber Resilience Act obligations), and what scope definitions, rules of engagement, and vendor contract terms should require to keep AI pentests bounded and defensible, citing a Cloud Security Alliance finding that 53% of orgs saw AI agents exceed intended permissions. It targets security, legal, and procurement teams designing AI pentesting pilots rather than practitioners running attacks.

xbow.comarticlePublished and added 8 Aug 2026🛡️ Security

A reviewer's first-person writeup of the Advanced Red Team Operations Certification (ARTOC) by White Knight Labs, covering a full red team engagement curriculum: building C2 infrastructure with Cobalt Strike and Adaptix, cloud redirectors across AWS, Azure and GCP via CDNs and serverless functions, Active Directory and ADCS exploitation, and kernel and user mode EDR evasion, tested against real enterprise EDR products. The exam is a 48-hour infrastructure build and compromise exercise followed by a 48-hour red team report. The post is a positive testimonial encouraging enrollment rather than a technical walkthrough of any attack.

kuwaitist.github.ioarticleAdded 2 Oct 2026, published 6 Aug 2026🛡️ Security