AI security research / sources
Primary reports, advisories, papers and original records behind the Claims. Each record supports specific evidence rather than a whole Case by default.
785 Evidence · Page 26 of 27
30 matching records on this page
Living threat-intelligence record for tronify.rent. It records first detection on February 26, 2026, later abuse-report activity and continuing risk signals, establishing that public warning evidence about the domain existed before the alleged September losses.
Ulysses: A Security Harness For Synthesizing Verifiable Web Exploits
Unit 42 October 23 threat brief records post-exploitation at a European government, theft of authentication material, and command sequencing interpreted as signs of agentic attacker tooling; 22.6 million are potentially exposed instances, not victims.
Unitree Go2 CVE-2026-115995 advisory: chat_go set_volume command injection
Reported evidence for A reported review of law-enforcement records identifies two investigations involving manufactured images or videos submitted as evidence. Research intake: DB-RADAR-CP7-CP7A-077.
October 22 technical disclosure of spending authorization, cross-origin SIWE and Solana payment-verification flaws, with explicit limits of local testing.
First-party disclosure separating a production-observed host memory leak, laboratory host execution, disk block reuse and cross-account snapshots.
vLLM advisory: EPS disguised as PNG reaches Ghostscript via Pillow
vLLM CVE-2026-114053 code_revision override advisory with an offline import-time PoC, requiring a dynamic AutoProcessor and trust_remote_code. Affected 0.7.3 through 0.30.x, fixed 0.31.0.
Advisory reproducing fatal engine behavior on legitimate balanced black/white image content.
Advisory on unbounded tokenizer chat templates monopolizing a shared server-renderer worker.
vLLM maintainer advisory GHSA-6757-hggm-hp2w shared-memory handle forgery
Advisory on browser-origin requests reaching loopback model serving without a configured API key.
Advisory showing a valid long audio input exhausting shared GPU memory in Phi-4 multimodal inference.
Advisory showing a distinct OpenAI-compatible endpoint missed request-template validation.
CVE-2026-76066 analysis distinguishes hiding tools from users and enforcing permission at ToolNode execution.
VULONE analyzes exposed Cairn operator records, access outcomes and human-directed agent workflows; its project counts are not an independent victim census.
WADE: An LSTM-Based Anomaly Detection Engine for WebAssembly Applications
Washington Post October 26: Cathedral tests Anthropic external business systems
Anthropic says it does not disclose customer or end-user information in response to government requests except through valid legal process, such as a subpoena or warrant, unless it believes an emergency may result in imminent physical harm or death and immediate disclosure could avert it. Anthropic also says it evaluates requests for legal validity, may reject requests that are broad or vague, and generally gives users notice unless prohibited or a rare exception applies. For API or enterprise customer data, Anthropic says it will generally ask the requester to contact the customer first.
Liu and Tsai quantify missing environment provenance among the 198 most-downloaded in-scope GGUF repositories and demonstrate partial bit-exact reconstruction.
Commit-specific harness analysis with selection-stage demonstrations.
Who Verifies the Tools? How Warped Formatters Mislead Agents and Their Verifiers, William Jeffries
Wiz CIRT reconstructs a real cloud intrusion through an exposed Kafka UI, compromised cloud and IdP identities, and CI/CD or GitOps effects. The same IP scanned over 600 other environments, not 600 known breaches. The precise automation share and final exported data volume remain uncertain.
Wiz traces malicious LiteLLM release artifacts, observed quarantine times and follow-on AWS/Bedrock reconnaissance, separately from vendor removal timestamps.
No matches on this page.