Deep Security Center
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Adobe FrameMaker Publishing Server
1011929* - Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability (CVE-2023-44324)
DCERPC Services
1003761* - SMBv2 Infinite Loop Vulnerability
1004542* - Windows Netlogon Service Denial Of Service (CVE-2010-2742)
DCERPC Services - Client
1004924* - Color Control Panel Insecure Library Loading Vulnerability Over Network Share (CVE-2010-5082)
1004926* - Indeo Codec Insecure Library Loading Vulnerability Over Network Share (CVE-2010-3138)
Fortra GoAnywhere MFT
1011958* - Fortra GoAnywhere MFT Authentication Bypass Vulnerability (CVE-2024-0204)
Jenkins Remoting
1011966* - Jenkins Arbitrary File Read Vulnerability Over HTTP (CVE-2024-23897)
Open Automation Software Platform OAS
1011934* - Open Automation Software OAS Platform Improper Authentication Vulnerability (CVE-2022-26833)
SolarWinds Orion Platform
1011977 - SolarWinds Orion Platform SQL Injection Vulnerability (CVE-2023-35188)
1011935* - SolarWinds Orion Platform SQL Injection Vulnerability (CVE-2023-40056)
Splunk Enterprise
1011937* - Splunk Enterprise Arbitrary File Write Vulnerability (CVE-2023-46214)
Web Application PHP Based
1011975 - WordPress 'Backup Migration' Plugin Command Injection Vulnerability (CVE-2023-7002)
Web Server HTTPS
1011973 - Cacti SQL Injection Vulnerability (CVE-2023-51448)
1011944* - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52326)
1011943* - Trend Micro Apex Central Local File Inclusion Vulnerability (CVE-2023-52325)
Windows Services RPC Server DCERPC
1003766* - Local Security Authority Subsystem Service Integer Overflow Vulnerability
Integrity Monitoring Rules:
1010950* - Linux/Unix - sudo files modified (ATT&CK T1548.003)
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Adobe FrameMaker Publishing Server
1011929* - Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability (CVE-2023-44324)
DCERPC Services
1003761* - SMBv2 Infinite Loop Vulnerability
1004542* - Windows Netlogon Service Denial Of Service (CVE-2010-2742)
DCERPC Services - Client
1004924* - Color Control Panel Insecure Library Loading Vulnerability Over Network Share (CVE-2010-5082)
1004926* - Indeo Codec Insecure Library Loading Vulnerability Over Network Share (CVE-2010-3138)
Fortra GoAnywhere MFT
1011958* - Fortra GoAnywhere MFT Authentication Bypass Vulnerability (CVE-2024-0204)
Jenkins Remoting
1011966* - Jenkins Arbitrary File Read Vulnerability Over HTTP (CVE-2024-23897)
Open Automation Software Platform OAS
1011934* - Open Automation Software OAS Platform Improper Authentication Vulnerability (CVE-2022-26833)
SolarWinds Orion Platform
1011977 - SolarWinds Orion Platform SQL Injection Vulnerability (CVE-2023-35188)
1011935* - SolarWinds Orion Platform SQL Injection Vulnerability (CVE-2023-40056)
Splunk Enterprise
1011937* - Splunk Enterprise Arbitrary File Write Vulnerability (CVE-2023-46214)
Web Application PHP Based
1011975 - WordPress 'Backup Migration' Plugin Command Injection Vulnerability (CVE-2023-7002)
Web Server HTTPS
1011973 - Cacti SQL Injection Vulnerability (CVE-2023-51448)
1011944* - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52326)
1011943* - Trend Micro Apex Central Local File Inclusion Vulnerability (CVE-2023-52325)
Windows Services RPC Server DCERPC
1003766* - Local Security Authority Subsystem Service Integer Overflow Vulnerability
Integrity Monitoring Rules:
1010950* - Linux/Unix - sudo files modified (ATT&CK T1548.003)
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
ConnectWise ScreenConnect
1011985 - ConnectWise ScreenConnect Authentication Bypass Vulnerability (CVE-2024-1709)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
ConnectWise ScreenConnect
1011985 - ConnectWise ScreenConnect Authentication Bypass Vulnerability (CVE-2024-1709)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Ivanti Avalanche
1011863* - Ivanti Avalanche Authentication Bypass Vulnerability (CVE-2021-22962 & CVE-2023-32566)
Jenkins Remoting
1011976 - Jenkins Arbitrary File Read Vulnerability Over WebSocket (CVE-2024-23897)
Web Application PHP Based
1011974 - GLPI SQL Injection Vulnerability (CVE-2023-46727)
Web Server HTTPS
1011917* - Adobe RoboHelp Server Information Disclosure Vulnerability (CVE-2023-22272)
Web Server Miscellaneous
1011971 - Paessler PRTG Network Monitor Remote Code Execution Vulnerability (CVE-2023-32781)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Ivanti Avalanche
1011863* - Ivanti Avalanche Authentication Bypass Vulnerability (CVE-2021-22962 & CVE-2023-32566)
Jenkins Remoting
1011976 - Jenkins Arbitrary File Read Vulnerability Over WebSocket (CVE-2024-23897)
Web Application PHP Based
1011974 - GLPI SQL Injection Vulnerability (CVE-2023-46727)
Web Server HTTPS
1011917* - Adobe RoboHelp Server Information Disclosure Vulnerability (CVE-2023-22272)
Web Server Miscellaneous
1011971 - Paessler PRTG Network Monitor Remote Code Execution Vulnerability (CVE-2023-32781)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Arcserve Unified Data Protection
1011972 - Arcserve Unified Data Protection Directory Traversal Vulnerability (CVE-2023-42000)
1011970 - Arcserve Unified Data Protection Remote Code Execution Vulnerability (CVE-2023-41998)
DCERPC Services - Client
1011950* - Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Over SMB (CVE-2024-21412)
Ivanti Avalanche Remote Control Server
1011962 - Ivanti Avalanche Server-Side Request Forgery Vulnerability (CVE-2023-46262)
Web Client Common
1011960 - 7-Zip Integer Underflow Vulnerability (CVE-2023-31102)
1011949* - Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21412)
Zoho ManageEngine Recovery Manager Plus
1011923* - Zoho ManageEngine Recovery Manager Plus Command Injection Vulnerability (CVE-2023-48646)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Arcserve Unified Data Protection
1011972 - Arcserve Unified Data Protection Directory Traversal Vulnerability (CVE-2023-42000)
1011970 - Arcserve Unified Data Protection Remote Code Execution Vulnerability (CVE-2023-41998)
DCERPC Services - Client
1011950* - Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Over SMB (CVE-2024-21412)
Ivanti Avalanche Remote Control Server
1011962 - Ivanti Avalanche Server-Side Request Forgery Vulnerability (CVE-2023-46262)
Web Client Common
1011960 - 7-Zip Integer Underflow Vulnerability (CVE-2023-31102)
1011949* - Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21412)
Zoho ManageEngine Recovery Manager Plus
1011923* - Zoho ManageEngine Recovery Manager Plus Command Injection Vulnerability (CVE-2023-48646)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
HP Intelligent Management Center (IMC)
1011941 - Apache OFBiz Insecure Deserialization Vulnerability (CVE-2023-49070)
Ivanti Avalanche
1011955 - Ivanti Avalanche XML External Entity Information Disclosure Vulnerability (CVE-2023-46265)
Jenkins Remoting
1011966 - Jenkins Arbitrary File Read Vulnerability (CVE-2024-23897)
Trend Micro Mobile Security Server
1011957* - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41176)
1011964 - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41177)
1011963 - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41178)
Web Server HTTPS
1011967 - Trend Micro Apex Central File Upload Vulnerability (CVE-2023-52324)
Web Server Miscellaneous
1011954* - Atlassian Confluence Data Center and Server Template Injection Vulnerability (CVE-2023-22527)
1011961 - Paessler PRTG Network Monitor Cross-Site Scripting Vulnerability (CVE-2023-51630)
Zoho ManageEngine
1011965 - Zoho ManageEngine Multiple Products Directory Traversal Vulnerability (CVE-2023-47211)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
HP Intelligent Management Center (IMC)
1011941 - Apache OFBiz Insecure Deserialization Vulnerability (CVE-2023-49070)
Ivanti Avalanche
1011955 - Ivanti Avalanche XML External Entity Information Disclosure Vulnerability (CVE-2023-46265)
Jenkins Remoting
1011966 - Jenkins Arbitrary File Read Vulnerability (CVE-2024-23897)
Trend Micro Mobile Security Server
1011957* - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41176)
1011964 - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41177)
1011963 - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41178)
Web Server HTTPS
1011967 - Trend Micro Apex Central File Upload Vulnerability (CVE-2023-52324)
Web Server Miscellaneous
1011954* - Atlassian Confluence Data Center and Server Template Injection Vulnerability (CVE-2023-22527)
1011961 - Paessler PRTG Network Monitor Cross-Site Scripting Vulnerability (CVE-2023-51630)
Zoho ManageEngine
1011965 - Zoho ManageEngine Multiple Products Directory Traversal Vulnerability (CVE-2023-47211)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Trend Micro Mobile Security Server
1011957 - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41176)
VoIP Smart
1009953* - Digium Asterisk PJSIP In-Dialog MESSAGE Request Denial-of-Service (CVE-2019-12827)
Web Application Tomcat
1011958 - Fortra GoAnywhere MFT Authentication Bypass Vulnerability (CVE-2024-0204)
Web Server HTTPS
1011959 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52329)
Web Server Miscellaneous
1011956 - GitLab Privilege Escalation Vulnerability (CVE-2023-7028)
1011948 - Ivanti Avalanche Remote Code Execution Vulnerability (CVE-2023-46263)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Trend Micro Mobile Security Server
1011957 - Trend Micro Mobile Security Server Cross-Site Scripting Vulnerability (CVE-2023-41176)
VoIP Smart
1009953* - Digium Asterisk PJSIP In-Dialog MESSAGE Request Denial-of-Service (CVE-2019-12827)
Web Application Tomcat
1011958 - Fortra GoAnywhere MFT Authentication Bypass Vulnerability (CVE-2024-0204)
Web Server HTTPS
1011959 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52329)
Web Server Miscellaneous
1011956 - GitLab Privilege Escalation Vulnerability (CVE-2023-7028)
1011948 - Ivanti Avalanche Remote Code Execution Vulnerability (CVE-2023-46263)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
OpenTSDB
1011938 - OpenTSDB Unauthenticated Command Injection Vulnerability (CVE-2023-36812 and CVE-2023-25826)
Web Application PHP Based
1011947 - WordPress 'Backup Migration' Plugin Remote Code Execution Vulnerability (CVE-2023-6553)
Web Server HTTPS
1011916* - Adobe RoboHelp Server SQL Injection Vulnerability (CVE-2023-22275)
1011931* - Adobe RoboHelp Server XML External Entity Information Disclosure Vulnerability (CVE-2023-22274)
1011905* - Cachet Server-Side Template Injection Vulnerability (CVE-2023-43661)
1011914* - Dolibarr ERP And CRM Command Injection Vulnerability (CVE-2023-38886)
1011953 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52327)
1011952 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52328)
1011951 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52330)
Web Server Miscellaneous
1011954 - Atlassian Confluence Data Center and Server Template Injection Vulnerability (CVE-2023-22527)
1011924* - XWiki Code Injection Vulnerability (CVE-2023-46731)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
OpenTSDB
1011938 - OpenTSDB Unauthenticated Command Injection Vulnerability (CVE-2023-36812 and CVE-2023-25826)
Web Application PHP Based
1011947 - WordPress 'Backup Migration' Plugin Remote Code Execution Vulnerability (CVE-2023-6553)
Web Server HTTPS
1011916* - Adobe RoboHelp Server SQL Injection Vulnerability (CVE-2023-22275)
1011931* - Adobe RoboHelp Server XML External Entity Information Disclosure Vulnerability (CVE-2023-22274)
1011905* - Cachet Server-Side Template Injection Vulnerability (CVE-2023-43661)
1011914* - Dolibarr ERP And CRM Command Injection Vulnerability (CVE-2023-38886)
1011953 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52327)
1011952 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52328)
1011951 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52330)
Web Server Miscellaneous
1011954 - Atlassian Confluence Data Center and Server Template Injection Vulnerability (CVE-2023-22527)
1011924* - XWiki Code Injection Vulnerability (CVE-2023-46731)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services - Client
1011950 - Microsoft Windows SmartScreen Vulnerability Over SMB (ZDI-CAN-23100)
Web Client Common
1011949 - Microsoft Windows SmartScreen Vulnerability (ZDI-CAN-23100)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
DCERPC Services - Client
1011950 - Microsoft Windows SmartScreen Vulnerability Over SMB (ZDI-CAN-23100)
Web Client Common
1011949 - Microsoft Windows SmartScreen Vulnerability (ZDI-CAN-23100)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Ceph Messenger Client
1011911* - Linux Kernel Buffer Overflow Vulnerability (CVE-2023-44466)
Splunk Enterprise
1011912* - Splunk Enterprise Privilege Escalation Vulnerability (CVE-2023-32707)
Web Server Common
1010980* - Apache Airflow Remote Code Execution Vulnerability (CVE-2020-11978)
Web Server HTTPS
1011919* - Adobe RoboHelp Server Path Traversal Vulnerability (CVE-2023-22273)
1011942 - Cacti SQL Injection Vulnerability (CVE-2023-49085)
1011944 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52326)
1011943 - Trend Micro Apex Central Local File Inclusion Vulnerability (CVE-2023-52325)
Web Server Miscellaneous
1011903* - MagnusBilling Remote Command Execution Vulnerability (CVE-2023-30258)
Web Server Squid
1011939 - Squid Proxy Heap Buffer Overflow Vulnerability (CVE-2023-46847)
Zoho ManageEngine Applications Manager
1011915* - Zoho ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CVE-2023-38333)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
Ceph Messenger Client
1011911* - Linux Kernel Buffer Overflow Vulnerability (CVE-2023-44466)
Splunk Enterprise
1011912* - Splunk Enterprise Privilege Escalation Vulnerability (CVE-2023-32707)
Web Server Common
1010980* - Apache Airflow Remote Code Execution Vulnerability (CVE-2020-11978)
Web Server HTTPS
1011919* - Adobe RoboHelp Server Path Traversal Vulnerability (CVE-2023-22273)
1011942 - Cacti SQL Injection Vulnerability (CVE-2023-49085)
1011944 - Trend Micro Apex Central Cross-Site Scripting Vulnerability (CVE-2023-52326)
1011943 - Trend Micro Apex Central Local File Inclusion Vulnerability (CVE-2023-52325)
Web Server Miscellaneous
1011903* - MagnusBilling Remote Command Execution Vulnerability (CVE-2023-30258)
Web Server Squid
1011939 - Squid Proxy Heap Buffer Overflow Vulnerability (CVE-2023-46847)
Zoho ManageEngine Applications Manager
1011915* - Zoho ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CVE-2023-38333)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
ActiveMQ OpenWire
1011897* - Apache ActiveMQ Insecure Deserialization Vulnerability (CVE-2023-46604)
Adobe FrameMaker Publishing Server
1011929 - Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability (CVE-2023-44324)
HP Intelligent Management Center (IMC)
1011940 - Apache OFBiz Authentication Bypass Vulnerability (CVE-2023-51467)
PaperCut
1011855* - PaperCut NG and MF Remote Code Execution Vulnerability (CVE-2023-39469)
SolarWinds Information Service
1011901* - SolarWinds Network Configuration Manager Directory Traversal Vulnerability (CVE-2023-33226)
Splunk Enterprise
1011937 - Splunk Enterprise Arbitrary File Write Vulnerability (CVE-2023-46214)
Unix Samba
1011796* - Linux Kernel KSMBD Denial of Service Vulnerability (CVE-2023-32247)
Web Application PHP Based
1011936 - WordPress 'My Calendar' Plugin SQL Injection Vulnerability (CVE-2023-6360)
Web Server Miscellaneous
1011898* - Apache Superset Improper Input Validation Vulnerability (CVE-2023-39265)
1011844* - Atlassian Jira and Jira Service Desk 'Stagil Navigation Menus and Themes' Plugin Directory Traversal Vulnerability (CVE-2023-26255 and CVE-2023-26256)
1011906* - XWiki Change Request Extension Code Injection Vulnerability (CVE-2023-45138)
1011904* - XWiki Cross-Site Scripting Vulnerability (CVE-2023-40176)
Windows SMB Server
1011058* - Identified DCERPC EFSRPC Methods Call Over SMB Protocol (PetitPotam)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
ActiveMQ OpenWire
1011897* - Apache ActiveMQ Insecure Deserialization Vulnerability (CVE-2023-46604)
Adobe FrameMaker Publishing Server
1011929 - Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability (CVE-2023-44324)
HP Intelligent Management Center (IMC)
1011940 - Apache OFBiz Authentication Bypass Vulnerability (CVE-2023-51467)
PaperCut
1011855* - PaperCut NG and MF Remote Code Execution Vulnerability (CVE-2023-39469)
SolarWinds Information Service
1011901* - SolarWinds Network Configuration Manager Directory Traversal Vulnerability (CVE-2023-33226)
Splunk Enterprise
1011937 - Splunk Enterprise Arbitrary File Write Vulnerability (CVE-2023-46214)
Unix Samba
1011796* - Linux Kernel KSMBD Denial of Service Vulnerability (CVE-2023-32247)
Web Application PHP Based
1011936 - WordPress 'My Calendar' Plugin SQL Injection Vulnerability (CVE-2023-6360)
Web Server Miscellaneous
1011898* - Apache Superset Improper Input Validation Vulnerability (CVE-2023-39265)
1011844* - Atlassian Jira and Jira Service Desk 'Stagil Navigation Menus and Themes' Plugin Directory Traversal Vulnerability (CVE-2023-26255 and CVE-2023-26256)
1011906* - XWiki Change Request Extension Code Injection Vulnerability (CVE-2023-45138)
1011904* - XWiki Cross-Site Scripting Vulnerability (CVE-2023-40176)
Windows SMB Server
1011058* - Identified DCERPC EFSRPC Methods Call Over SMB Protocol (PetitPotam)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Featured Stories
Unveiling AI Agent Vulnerabilities Part V: Securing LLM ServicesTo conclude our series on agentic AI, this article examines emerging vulnerabilities that threaten AI agents, focusing on providing proactive security recommendations on areas such as code execution, data exfiltration, and database access.Read more
Unveiling AI Agent Vulnerabilities Part IV: Database Access VulnerabilitiesHow can attackers exploit weaknesses in database-enabled AI agents? This research explores how SQL generation vulnerabilities, stored prompt injection, and vector store poisoning can be weaponized by attackers for fraudulent activities.Read more
The Mirage of AI Programming: Hallucinations and Code IntegrityThe adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.Read more
Open RAN: Attack of the xAppsThis article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handlingRead more