Latest threat reports & articles

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Security in a Workflow: Exploring Role-Based Agentic Architectures for Vulnerability Handling arXiv:2606.14261v1 Announce Type: new Abstract: Secure software engineering in practice is a multi-stage workflow involving vulnerability analysis, remediation, and fix verification. However, current LLM-based software security approaches often focus on isolated tasks such as detection or patch generation, with limited attention to agentic architectures reflecting industrial workflo…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

From Prompts to Responses: Dual-Sided Data Leakage and Defense in Split Large Language Models arXiv:2606.14210v1 Announce Type: new Abstract: Large language models (LLMs) are increasingly deployed in privacy-sensitive domains, where users must balance the risk of data exposure through external APIs against the high computational cost of local deployment. Split learning has therefore emerged as a promising paradigm for LLM fine-tuning and inference under limited local resourc…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Security Evaluation of Mobile Banking Applications in Sudan arXiv:2606.14165v1 Announce Type: new Abstract: The rapid digitalization of the Sudanese financial sector has precipitated a surge in Mobile Banking Applications (MBAs); however, this growth has frequently outpaced rigorous security auditing. This study provides a comprehensive technical audit of the four most widely used Sudanese MBAs( Bankak, Fawry, Okash, and Sahil )collectively serving a user base of over 1.6 mi…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

SkillMutator: Benchmarking and Defending Language-and-Code Cross-modal Attacks on LLM Agent Skills arXiv:2606.14154v1 Announce Type: new Abstract: Large language model (LLM) agents increasingly extend their capabilities at runtime by loading Agent Skills, which pair natural-language specifications (SKILL.md) with executable scripts and resources. Because a skill's behavior relies on both natural-language instructions and executable code, assessing its safety requires cross-m…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Hierarchical Identity-Based Signature with Designated Aggregator from Lattices arXiv:2606.14090v1 Announce Type: new Abstract: In hierarchical organizations, authenticating data from multiple users can be complex and resource-intensive. Hierarchical Identity-Based Signature with Designated Aggregator (HIBS-DA) provides an efficient solution by allowing users at different levels to generate signatures that can be combined into a single, compact signature. We first introduce t…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Defending the Core: A Centrality-Based Protection Strategy for Supply Chain Security in npm Dependency Network arXiv:2606.14036v1 Announce Type: new Abstract: The modern software supply chain, taking Node Package Manager (npm) dependency network for example, relies heavily on shared open-source dependencies. While this promotes rapid development, it introduces systemic vulnerabilities as well. Concerning this potential risk, we analyze the npm dependency network by modeling …

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Same-Origin Policy for Agentic Browsers arXiv:2606.14027v1 Announce Type: new Abstract: Agentic browsers integrate autonomous AI agents into web browsers, enabling users to accomplish web tasks through natural-language instructions. The same-origin policy (SOP) is a fundamental browser security mechanism that prevents unauthorized automated cross-origin data flows induced by scripts. However, whether SOP remains effective in agentic browsers is an open question that has not …

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Pseudonym Scheme Based on Hybrid Certificates for Security Credential Management System in Vehicular Communications arXiv:2606.14008v1 Announce Type: new Abstract: In recent years, the Institute of Electrical and Electronics Engineers (IEEE) and the European Telecommunications Standards Institute (ETSI) have developed a series of security communication standards for vehicular communications. These standards include mechanisms such as the Security Credential Management System…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Hidden in Plain Sight: Benchmarking Agent Safety Against Decomposition Attacks with DECOMPBENCH arXiv:2606.13994v1 Announce Type: new Abstract: LLM-based Agents are becoming increasingly capable and widely deployed, creating growing incentives for adversarial misuse in the real-world. A key emerging threat is Decomposition Attacks \cite{glukhov2024breach, jones2024adversaries} in which a harmful task is broken into simpler, benign subtasks that evade safety mechanisms when e…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Choric Masking in Ambient Release Systems: A Finite Certificate Calculus for Trace Indistinguishability under Bounded Audiences arXiv:2606.13967v1 Announce Type: new Abstract: This paper develops a finite certificate calculus for ambient release systems, staged probabilistic environments in which a protected coordinate is not observed directly but can remain statistically readable through visible roles, timing, repeated movement, bounded attention, linked rooms, and post-rel…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Software Dark Matter: Gazing at Uncharted Files to Navigate SBOM Integrations arXiv:2606.13966v1 Announce Type: new Abstract: Modern software supply chains have evolved into vast, heterogeneous networks where transparency - the granular understanding of all software components - is now a critical security requirement. While Software Bills of Materials (SBOMs) have emerged as the primary mechanism for this transparency, current industry practices rely on a metadata-centric pa…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Side-Channel Attacks Bypass Protection in 3D Printers arXiv:2606.13952v1 Announce Type: new Abstract: Active Motor Noise Cancellation (AMNC) ships in commercial fused deposition modeling (FDM) 3D printers as a hardware countermeasure against acoustic side-channel attacks that target intellectual property (IP). We present the first empirical evaluation of a deployed AMNC countermeasure, using a public dataset of synchronized acoustic and vibration recordings from two AMNC-equ…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Crypto x AI, AI x Crypto: A Survey arXiv:2606.13892v1 Announce Type: new Abstract: The intersection of crypto x AI is spawning papers, products, online posts, and companies. All the surrounding buzz, though, obscures what exactly has been done, what the opportunities and challenges are, and what open questions deserve attention. This survey paper asks what AI can do for blockchain-based technologies (broadly construed as "crypto") (crypto x AI), and vice versa (AI x crypto).…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Information Flow Paths from RTL Traces arXiv:2606.13860v1 Announce Type: new Abstract: Security validation is an important yet challenging part of the hardware design process, yet, by convention, validation engineers are tasked with defining the threat model, specifying the relevant security properties, detecting any violations of those properties, and assessing the consequences to system security, each of which is manually intensive and may introduce errors. The combined te…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

Smart Blockchain-Based Access Control for the Internet of Things arXiv:2606.13798v1 Announce Type: new Abstract: Securing access control in large-scale Internet of Things (IoT) deployments requires mechanisms that adapt to risk while preserving low latency for benign traffic. Permissioned blockchains such as Hyperledger Fabric offer auditability through smart contracts, but static endorsement policies impose the same validation depth on all requests, regardless of security p…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents arXiv:2606.13757v1 Announce Type: new Abstract: Large language model (LLM) reviewers are increasingly used in pull-request (PR) workflows, where their approvals help decide which code is merged into a repository. This raises a question that benchmarks for static vulnerability detection or code generation do not address: can an automated reviewer reject a malicious contribution when the attacker controls both…

arxiv_cs_cr · tlp:amber · 6/15/2026, 4:00:00 AM

FreoStream:Enhancing Stream Guardrails via Future-Aware Reasoning and Safety-Aligned Optimization arXiv:2606.13737v1 Announce Type: new Abstract: Stream guardrails enable token-level safety detection before full responses are generated. However, they often make overly conservative judgements and block those sensitive but safe tokens, which is known as over-refusal. Due to lack of full context, they also fail to detect implicitly harmful content from jailbreaking. To address …

snyk_blog · tlp:amber · 6/15/2026, 12:00:00 AM

The Government Just Banned an AI Model. An Engineer's Perspective. A government order abruptly took down a powerful AI model, exposing a new kind of supply chain risk for engineering teams. Security leaders need contingency plans before the next model disappears. The Government Just Banned an AI Model | Snyk You need to enable JavaScript to run this app. Skip to main content Platform Platform Snyk AI Security Platform Modern security in a single platform Snyk AI Workflows A…

lwn_kernel · tlp:amber · 6/14/2026, 6:47:53 PM

The 7.1 kernel has been released Linus has released the 7.1 kernel . " So it's only Sunday morning back home, but it's Sunday afternoon where I am right now, so I'm doing the 7.1 release at the regular time - just not in the regular timezone. " Significant changes in 7.1 include the removal of support for some old 486-based architectures, some new clone() flags making process management easier, BPF support for io_uring, zero-copy-I/O support for the ublk user-space block dri…

snyk_blog · tlp:amber · 6/14/2026, 1:00:00 PM

When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams On June 12, 2026, a US export-control directive led Anthropic to disable Claude Fable 5 and Mythos 5 worldwide over a reported jailbreak. The reported trigger was a code-analysis capability that defenders use routinely. Here is what happened, how the security community read it, and what security teams can take from it. When a Government Pulls an AI Model: What the Fable 5 …

unit42 · tlp:amber · 6/12/2026, 10:00:14 PM

Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered Unit 42 has discovered a new macOS Tahoe 26 forensic artifact that tracks user menu selections across the operating system. Learn more here. The post Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered appeared first on Unit 42 . Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered Menu Tools ATOMs Security Consulting About Us Under Attack? Threat Research Center Insights General General Tra…

lwn_kernel · tlp:amber · 6/12/2026, 7:38:09 PM

[$] An overlayfs update In a shortened session in the filesystem track at the 2026 Linux Storage, Filesystem, Memory Management, and BPF Summit , Amir Goldstein gave an update on the overlayfs union filesystem . There are some new features over the last few years that he wanted to mention, along with looking at the status of nesting overlayfs layers. The composefs use case that was discussed at the summit in 2023 has led to some interesting changes to overlayfs.

ars_security · tlp:amber · 6/12/2026, 7:26:47 PM

PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data Vulnerability in the Oracle-owned PeopleSoft software is about as critical as they come. One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to pay up in exchange for not leaking stolen data, researchers said. The group, tracked as ShinyHunters, had been e…

huggingface_blog · tlp:amber · 6/12/2026, 3:56:10 PM

olmo-eval: An evaluation workbench for the model development loop olmo-eval: An evaluation workbench for the model development loop Hugging Face Models Datasets Spaces Buckets new Docs Enterprise Pricing Website Tasks HuggingChat Collections Languages Organizations Community Blog Posts Daily Papers Learn Discord Forum GitHub Solutions Team & Enterprise Hugging Face PRO Enterprise Support Inference Providers Inference Endpoints Storage Buckets Log In Sign Up Back to Artic…

lwn_kernel · tlp:amber · 6/12/2026, 1:41:22 PM

Hundreds of AUR packages compromised Hundreds of orphaned packages hosted by the Arch User Repository (AUR) have been compromised by an attacker who has added a malicious npm package ( atomic-lockfile ) that can exfiltrate sensitive data. The project is currently working on cleaning up the mess. There is a list of affected packages and post (possibly NSFW domain) by "sodiboo" with additional information. Arch Linux users (or users of Arch-based distributions) that use AUR pa…

lwn_kernel · tlp:amber · 6/12/2026, 1:12:50 PM

Security updates for Friday Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, bind, expat, httpd:2.4, kernel, kernel-rt, mod_http2, openssl, poppler, redis, redis:7, samba, and unbound), Debian (ironic, kernel-wedge, libinput, linux-base, and neutron), Fedora (kernel, openssl, vaultwarden, and vaultwarden-web), Mageia (erlang-hex_core, erlang-rebar3, gnupg2, and sqlite3), Red Hat (buildah, podman, and skopeo), SUSE (flannel, gdk-pixbuf-loader-lib…

cisa_alerts · tlp:amber · 6/12/2026, 12:00:00 PM

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26…

trail_of_bits · tlp:amber · 6/12/2026, 11:00:00 AM

Factoring "short-sleeve" RSA keys with polynomials What happens when the bits of an RSA private key are heavily biased toward 0 instead of being randomly generated? The public key’s bits could be biased enough for us to detect these incorrectly generated keys in the wild. Together with Hanno Böck of the badkeys project, we found hundreds of unique keys that not only have this property, but can be quickly factored. We also found the bug that led to many of these keys and anal…

trend_micro · tlp:amber · 6/12/2026, 12:00:00 AM

Governing Claude Enterprise in Environments Where Inline Controls Can't Go TrendAI™ integrates the Claude Compliance API into TrendAI Vision One™ through two collectors that bring AI-aware visibility and detection to Claude Enterprise usage: one keeps all data inside the environment, while the other feeds TrendAI Vision One™ for deeper correlation and compliance. Governing Claude Enterprise in Environments Where Inline Controls Can't Go | Trend Micro (US) search close A…

chainalysis · tlp:amber · 6/11/2026, 8:12:10 PM

Global Law Enforcement Dismantles ‘AudiA6’ Crypto Laundering Network Linked to Ransomware Gangs Summary An international coalition of law enforcement agencies, including the U.S. DOJ, Secret Service, Europol, CBZC, and others, dismantled “AudiA6,”… The post Global Law Enforcement Dismantles ‘AudiA6’ Crypto Laundering Network Linked to Ransomware Gangs appeared first on Chainalysis . Global Law Enforcement Dismantles ‘AudiA6’ Crypto Laundering Network Chainalysis Produ…

talos · tlp:amber · 6/11/2026, 6:00:49 PM

A tale of two eras In this week’s newsletter, Amy reminisces on the tech toys of their childhood, inspired by a hilarious lesson about why your digital privacy shouldn't be left on an open channel. Welcome to this week’s edition of the Threat Source newsletter.  To the surprise of absolutely no one who has seen my face, I’m one of the younger employees at Talos. As my industry veteran colleagues were buying the first iPods, n…

lwn_kernel · tlp:amber · 6/11/2026, 2:49:37 PM

Homebrew 6.0.0 released Version 6.0.0 of the Homebrew package-management system has been released. Notable changes in this release include the introduction of tap trust to improve supply-chain security, improvements in sandboxing on Linux, a number of performance tweaks, and many other changes. See the changelog for a full list. LWN covered Homebrew in November 2025. Homebrew 6.0.0 released [LWN.net] LWN .net News from the source Content Weekly Edition Archives Search Kerne…

lwn_kernel · tlp:amber · 6/11/2026, 2:33:27 PM

[$] Automatic mTHP creation in 7.2 The Linux kernel has long tried to use huge pages as a way to improve performance, sometimes with more success than others. The size of huge pages has traditionally been imposed by the hardware, which typically only offers a couple of relatively large options. In more recent times, though, the use of multi-size transparent huge pages (mTHPs), with more flexible sizing implemented in software, has been growing. If all goes well, the 7.2 deve…

mandiant · tlp:amber · 6/11/2026, 2:00:00 PM

ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit Introduction Mandiant and Google Threat Intelligence Group (GTIG) have identified an active compromise and extortion campaign attributed to UNC6240 (ShinyHunters) targeting Oracle PeopleSoft application infrastructure. The activity was observed between May 27, 2026, and June 9, 2026 and is consistent with the exploitation of CVE-2026-35273 , a critical remote code execution vulnerability (CVSS 9.8) in the E…

checkpoint_research · tlp:amber · 6/11/2026, 1:37:11 PM

From SQLi to RCE – Exploiting LangGraph’s Checkpointer By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers that store execution state. But what happens when that persistence layer isn’t locked down? Key Points Background LangGraph is an open-source framework for building stateful, multi-agent AI systems with built-in persistence. It’s an extension of LangChain, with over […] The post F…

lwn_kernel · tlp:amber · 6/11/2026, 1:08:29 PM

Security updates for Thursday Security updates have been issued by AlmaLinux (.NET 10.0, .NET 8.0, .NET 9.0, podman, poppler, and postgresql-jdbc), Debian (chromium, jackson-core, libdbi-perl, and libinput), Fedora (httpd, rust, and xmlstarlet), Mageia (openssh, postfix, and roundcubemail), Oracle (frr, kernel, libyang, n, postgresql-jdbc, and unbound), Red Hat (.NET 10.0, .NET 8.0, .NET 9.0, redis, and redis:7), SUSE (agama-web-ui, cockpit, cosign, glibc, google-cloud-sap-a…

sentinelone · tlp:amber · 6/11/2026, 1:00:59 PM

LABScon25 Replay | Keynote: Steps to an Ecology of Cyber Decades of piling complexity onto non-standardized stacks have left security unsteerable. Juan Andrés Guerrero-Saade makes the case for a new approach. In this final video in our LABScon Replay series from LABScon 25, we present the keynote from SentinelLABS’ own Juan Andrés Guerrero-Saade (JAGS), VP, Intelligence & Security Research and Senior Technical Fellow. In this engaging talk, Juan argues that cybersecurit…

cisa_alerts · tlp:amber · 6/11/2026, 12:00:00 PM

Brickcom Cameras View CSAF Summary Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to gain unauthorized access to live video feeds, retrieve sensitive visual information from affected premises, and obtain administrative control of the device. The following versions of Brickcom Cameras are affected: Brickcom Cube 3.2.3.5.6 Brickcom Dome 3.2.3.5.6  Brickcom Bullet 3.2.3.5.6  Brickcom Box 3.2.3.5.6 CVSS Vendor Equipment V…