N-able security advisory (AV26-1143)
No short summary was recorded for this item; read the full text at the source.
This page shows only the headline and the short summary. The full text is published by the original source.
Related news
Full archive →
CERT/CC Vulnerability Notes
VU#685399: PromZard context key code injection leads to remote code execution
Overview The npm library promzard, versions 4.0.0 and earlier, is vulnerable to remote code execution due to direct string interpolation of context object keys, which allows unsanitized JavaScript code injection. Description promzard is a Node.js library designed to automate configuration workflows by evaluating template modules and generating data objects via interactive prompting. The library allows users to provid…
Canadian Centre for Cyber Security
HPE security advisory (AV26-1144)
Unit 42 (Palo Alto)
Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors
Our analysis of how attackers used the open-source Cairn AI agent framework to autonomously breach semiconductor, defense and civic targets. The post Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors appeared first on Unit 42.
Help Net Security
Attackers breached 10 organizations with an open-source AI pentest framework
Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data at 10 of them, often after typing little more than a domain name and a one-line goal. Most of the targets fall into three groups: seven in the semicondu…