Common Vulnerabilities And Exposures
PulseAugur coverage of Common Vulnerabilities And Exposures — every cluster mentioning Common Vulnerabilities And Exposures across labs, papers, and developer communities, ranked by signal.
2 day(s) with sentiment data
-
OWASP LLM Top 10 Risk Ranking Weakly Aligns with Real Incident Data
A new analysis from arXiv investigates the robustness of the OWASP Top 10 for LLM Applications by comparing its expert-driven risk ranking against a large corpus of real-world LLM security incidents. The study found a w…
-
AI needed to combat AI-generated cyber threats straining infrastructure
The increasing complexity of cybersecurity threats, including AI-generated exploits, is straining cyber infrastructure. This necessitates the use of AI to defend against these advanced attacks, as highlighted by the cha…
-
Security community debates crediting AI for vulnerability discoveries
The security community is debating how to attribute credit for vulnerabilities discovered using AI and large language models (LLMs). Specifically, there is a question of whether the AI model itself, the individual who p…
-
AI tools suspected in massive Linux kernel vulnerability disclosure
The Linux kernel project has disclosed 442 vulnerabilities in the past three days, a significant surge in reported CVEs. While unconfirmed, it is suspected that these flaws were discovered using AI tools. Advanced cyber…
-
Anthropic proposes AI jailbreak severity scale modeled on CVEs
Anthropic has introduced a new framework called the Cyber Jailbreak Severity (CJS) scale, designed to classify the danger of AI jailbreaks similarly to how CVEs grade software vulnerabilities. This system ranges from CJ…
-
BERT models compared for CVE-to-CWE mapping in cybersecurity research
A new research paper explores the effectiveness of different BERT models for mapping Common Vulnerabilities and Exposures (CVE) to Common Weakness Enumeration (CWE) categories. The study compares multi-class and multi-l…
-
New security pipeline audits 8,764 MCP servers, catching vulnerabilities
A new security auditing pipeline called Sentinel has been developed to address the significant number of CVEs filed against MCP servers. The pipeline employs a multi-layered approach, including static analysis, behavior…
-
AVE clarified: AI agent weaknesses classified like CWE, not CVE
The author clarifies that AVE (Agent Vulnerability Enumeration) is more akin to CWE (Common Weakness Enumeration) than CVE (Common Vulnerabilities and Exposures). Unlike CVEs, which identify specific flaws in particular…
-
CISA maintains CVE list of cybersecurity flaws
The Cybersecurity and Infrastructure Security Agency (CISA) maintains a standardized list known as Common Vulnerabilities and Exposures (CVE). This catalog documents publicly disclosed cybersecurity flaws found in both …
-
AI cuts zero-day exploit time to 8 hours
AI is significantly accelerating the exploitation of software vulnerabilities, with the average time from a CVE being published to its active exploitation now reduced to just 8 hours. This rapid timeline, tracked by the…
-
Syscall-based HIDS generalization to unseen CVEs shows mixed results
Researchers explored the generalization capabilities of system-call based Host Intrusion Detection Systems (HIDS). They investigated whether a HIDS trained on normal behavior for specific Common Vulnerabilities and Expo…
-
Microsoft uses AI to streamline record-breaking Patch Tuesday security updates
Microsoft's June Patch Tuesday update addressed a record 206 CVEs, with AI playing a role in streamlining the process. The company is leveraging AI to enhance its security vulnerability management, making the traditiona…
-
VLLM AI inference engine suffers 36 unpatched vulnerabilities
VLLM, an open-source AI inference engine, has a significant number of vulnerabilities, with 36 reported CVEs. Of these, 14 are classified as critical or high severity, and one has a maximum CVSS score of 10. A large maj…
-
AI Industrializes Vulnerability Discovery, Straining Cybersecurity Remediation
The traditional approach to cybersecurity, focused on identifying and fixing vulnerabilities, is becoming unsustainable due to the sheer volume of discovered flaws. AI is accelerating vulnerability discovery, outpacing …
-
Open-source software plagued by numerous CVE disclosures
Multiple vulnerabilities have been disclosed this week within open-source software projects. The disclosures highlight a widespread issue affecting various components of the open-source ecosystem. This situation undersc…
-
Ubiquiti Patches Critical Flaws; FreeBSD Earns Security Accolades
This week's security news highlights Ubiquiti's release of a bulletin detailing fixes for six security vulnerabilities, including two rated as critical. Separately, FreeBSD has been recognized for its robust security pr…
-
Critical 7-Zip vulnerability risks code execution on millions of machines
A critical security vulnerability, rated 8.8 on the CVE scale, has been discovered in the widely-used open-source file archiving utility 7-Zip. This flaw allows for arbitrary code execution simply by opening a specially…
-
Prompt engineering guide details structured data extraction from advisories
This tutorial details a method for extracting structured data from unstructured text, specifically focusing on cybersecurity advisories. It outlines a process using the OpenAI API, Pydantic for schema definition and val…
-
AI tool MOAK autonomously exploits new security vulnerabilities
MOAK, also known as Mother of All KEVs, is a new AI-powered tool designed to rapidly exploit newly discovered security vulnerabilities. This agentic workflow can autonomously identify and exploit CVEs as soon as they ar…
-
AI security tools may hallucinate vulnerabilities from training data
Large language models used for AI-assisted vulnerability discovery can falsely present information from their training data as novel findings. This occurs because LLMs cannot distinguish between recalling information ab…