🕵️ RESEARCH & DEEP DIVES
- Jake Williams Releases CUSTODY Framework to Constrain AI Agents
Jake Williams released the CUSTODY framework to constrain AI agents inside networks.- The framework targets enterprise AI agents operating inside networks.
- Jake Williams released CUSTODY after attacks involving OpenAI and Hugging Face.
- CUSTODY is designed to constrain agent activity within the network.
Sources 📎 Coverage: darkreading.com · 👁 via Dark Reading
📋 ADVISORIES
- 📄 Source for Attackers Poisoned Three Rust Crates With Build-Time Malware — blog.rust-lang.org
🔓 CVEs & KEV
CVE-2026-71485 — CVSS 9.1 — Centrifugo: Client-forgeable headers emulation lets any client spoof headers ...
CVE-2026-77638 — CVSS 8.9 — Tor Race Condition Allows Onion Service Impersonation
CVE-2026-74836 — CVSS 8.7 — HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandi...
CVE-2026-53804 — CVSS 8.6 — OTRS Community Edition OS Command Injection via PGP ConfigurationOTRS Communi...
CVE-2026-77148 — CVSS 8.6 — Critical Stack Buffer Overflow in Comfast CF-N1-S Web Management
CVE-2026-69242 — CVSS 8.4 — libvips: Integer overflow leading to heap buffer overflow leading to possible...
CVE-2026-77642 — CVSS 7.5 — tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consens...
CVE-2026-70651 — CVSS 6.9 — libvips: Possible integer overflow when reading multi-page TIFF images via Im...
CVE-2026-77641 — CVSS 6.5 — tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLU...