UNST33R

#supply-chain

3 posts

#security-event (8)#abliteration (7)#red-teaming (6)#vulnerability-analysis (6)#open-models (5)#tutorial (5)#model-selection (5)#agent-security (5)#tools (4)#supply-chain (3)#php (2)#ransomware (1)#llm-infra (1)#ai-agents (1)#ai-red-teaming (1)#disclosure-policy (1)#triage (1)#attack-surface (1)#data-report (1)#threat-intel (1)#inference (1)#llama.cpp (1)#policy (1)#open-weights (1)#rce (1)#announcement (1)#deepseek (1)#benchmarks (1)#tiers (1)#model-safety (1)#primer (1)

llama.cpp CVE-2026-116096: the mmproj file is part of your attack surface

An out-of-bounds write in llama.cpp's Pocket-TTS component, triggered by a malicious mmproj file, with a public exploit. Timeline, auxiliary-file attack surface table, local verification script, and what red-team operators should check.

· updated October 27, 2026

Anthropic's OSS Scanner and Bitcoin Core's dilemma: AI vulnerability discovery just got institutional

Anthropic will scan open-source projects with its strongest models for free: 29,000 candidate findings in six months, 88% validation on criticals. Bitcoin Core is debating joining, and its year-long embargo policy is the sticking point. What this shift means for red-team operators.

LiteLLM 1.107.0 backdoor: attack analysis and a self-audit checklist

A malicious LiteLLM 1.107.0 release on PyPI and Docker shipped a credential stealer with dormant C2, built from stolen GitHub OAuth tokens. What the payload does, how to check your fleet, and why the code reads like LLM output.