SkillSpector OSV client errors conflated scanner failure with a critical risk verdict
A no_proxy IPv6 parsing error reportedly stopped vulnerability analysis yet still produced a misleading overall critical result.
AI security research / cases
Investigations, evidence and outcomes.
628 Cases · Page 32 of 32
8 matching records on this page
A no_proxy IPv6 parsing error reportedly stopped vulnerability analysis yet still produced a misleading overall critical result.
A four-pair local test found language-dependent failure in SkillSpector static scanning, not a bypass of every optional dynamic detector.
A 45-session agent observability study found substantial gaps between declared completion and independent evidence of edits or checks.
A controlled benchmark compares disclosure state tracked across recipients against local-only rules that can miss cumulative privacy leaks.
A proposed microVM agent runtime brokers outbound connections and credentials through host policy, while documenting residual trusted-destination risk.
Authors tested 44 reproducible flaws in 12 apps and found many attacks reachable through AI-mediated interfaces, with different tool interfaces exposing different capabilities.
A verification system checks structured application state and selectively abstains, improving correctness on tested GUI-agent benchmarks at added cost.
Talos describes malware that collects credentials and passes victim profiles to model APIs for prioritization, without establishing a count of compromised victims.
No matches on this page.