Vghost: Beyond the Privilege Boundary
Corvus AI found a local privilege-escalation bug in Linux's vhost subsystem.
Corvus AI found a local privilege-escalation bug in Linux's vhost subsystem.
Tencent Zhuque Lab evaluated DeepSeek Harness against prompt injection via A.I.G across 14,560 runs. Risks span attack expressions, file representations, and Skill assets, with high success rates in fake completions, hidden Unicode, and Skill vectors.
Read Full Article arrow_forwardSCTPhantom is a Linux kernel use-after-free in SCTP's dynamic address reconfiguration code.
Read Full Article arrow_forwardThis article breaks down the end-to-end attack chain of Memory Heist and demonstrates how to automate its detection using the Agent Security Scanning module (agent-scan) in AI-Infra-Guard (A.I.G).
Read Full Article arrow_forwardAI Agents gain access to tools, code execution, and business systems, risks such as prompt injection, jailbreaks, and tool abuse can lead to data leaks, system compromise, or business tampering. Tencent Zhuque Lab open-sources the A.I.G Agent Security dirll Skill to help developers and business teams run lightweight, local, and systematic security tests before launch.
Read Full Article arrow_forwardThe Chinese University of Hong Kong, Shenzhen, in collaboration with Tencent Zhuque Lab, has released SkillTrustBench, the first safety evaluation benchmark for Agent skills.
Read Full Article arrow_forward