Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup

yeswehack.com | vulnerability | #ai-security | #rce

Summary

Can AI invent new attack techniques? James Kettle found out. Also covered: CRLF-powered desync attacks, the CSS bomb in your inbox and getting root on the G1.
Published
Collected

original ↗

Related coverage

  1. LLM SecRange: Open-Source Penetration Testing Playground for Large Language Models & Vulnerable Agents (github.com)
  2. CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap (yeswehack.com)
  3. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  4. MECCHA CHAMELEON can't hide from the RCE (aikido.dev)
  5. Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise (wiz.io)
  6. CVE-2026-32475: Elementor Pro Forms Unauthenticated Arbitrary File Upload to RCE Lab & PoC (github.com)

back