Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
A patched Unsloth Studio vulnerability allows malicious AI models to execute arbitrary Python code during inspection, via the trust_remote_code setting.
Read at the sourceSecurity News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 64BleepingComputer · 163CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 69DataBreaches.net · 29Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 54Security.NL · 300SecurityWeek · 66SentinelOne · 33The Cyber Express · 70TheCyberThrone · 55The Hacker News · 287The Record · 39Unit 42 · 45
Cloudflare Announces Public Certificate Authority for the Post-Quantum Web
Automated certificates for everyone, built for today, and hardened for the era of quantum computing.
Read at the source
'NeedyMantis' Provides Long-Term Access to Compromised Networks
Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations.
Read at the source
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.
Read at the source
61-64 / 64 news items shown