» Tag
vulnerabilities
16 postsStealing Reasoning Traces from Proprietary LLM APIs
We found a way to extract reasoning traces from frontier AI APIs, highlighting significant security risks and potential data leaks for engineers.
We hired a security engineer and got back 123 findings
Profullstack's security audit revealed 123 findings across two repositories, offering vital lessons for engineers.
Hunt NGINX Proxies with Damn Vulnerable NGINX Proxy
Damn Vulnerable NGINX Proxy provides a resource for discovering vulnerabilities in NGINX servers.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comMalicious SIM Cards Can Shut Down Phones and Steal Files
Malicious SIM cards can shut down phones and steal files, revealing serious security risks. Researchers highlight vulnerabilities in cellular devices.
New TONTOU CPU Attack Bypasses Spectre v2 Fixes, Leaks Linux Passwords
Researchers developed an exploit that bypasses Spectre v2 mitigations to leak password hashes from Linux systems.
Research Reveals Some RISC-V Chips Are Vulnerable to Spectre Attacks
Some RISC-V chips are found to be vulnerable to Spectre attacks, posing significant risks for engineers. Awareness and mitigation strategies are essential.
Near-autonomous AI agents attack Taiwan's nuclear safety agency
Details on the near-autonomous AI attack on Taiwan's nuclear safety agency.
Security Flaws in AI Agent Frameworks Expose Deeper Issues
Check Point reveals critical security flaws in AI frameworks, stressing the need for systemic fixes.
Systemic Risks in the Managed PostgreSQL Industry: Extension Risks Are Real
Research reveals critical security vulnerabilities in managed PostgreSQL extensions, emphasizing risks for engineers.
Can AI Conduct Novel Security Research? Introducing the HTTP Terminator
The HTTP Terminator project explores AI's ability to develop new attack techniques, offering significant insights for security engineers.