UNST33R

#vulnerability-analysis

6 posts

#security-event (8)#abliteration (7)#red-teaming (6)#vulnerability-analysis (6)#open-models (5)#tutorial (5)#model-selection (5)#agent-security (5)#tools (4)#supply-chain (3)#php (2)#ransomware (1)#llm-infra (1)#ai-agents (1)#ai-red-teaming (1)#disclosure-policy (1)#triage (1)#attack-surface (1)#data-report (1)#threat-intel (1)#inference (1)#llama.cpp (1)#policy (1)#open-weights (1)#rce (1)#announcement (1)#deepseek (1)#benchmarks (1)#tiers (1)#model-safety (1)#primer (1)

· updated October 27, 2026

Triage 5,000 bulk vulnerability reports for about $50

Anthropic's OSS Scanner sends maintainers thousands of unvalidated model-generated findings. A reproducible triage workflow with cve.now MCP and unst33r-deepseek: normalization, dedup, reachability pre-screen, and a human queue, with per-report cost math.

PHP2Shell day 3: the exploitation curve, the embargo leak, and a second supply-chain shock

Cloudflare's numbers show exploitation starting before disclosure. WatchTowr confirms live attempts. Plus the eMudhra CA key fiasco in the same 48-hour window. What ops and red teams should do now.

LiteLLM 1.107.0 backdoor: attack analysis and a self-audit checklist

A malicious LiteLLM 1.107.0 release on PyPI and Docker shipped a credential stealer with dormant C2, built from stolen GitHub OAuth tokens. What the payload does, how to check your fleet, and why the code reads like LLM output.

PHP2Shell: pre-auth RCE in core PHP, found by AI agents

CVE-2026-109618 and CVE-2026-109619 let unauthenticated attackers execute code on stock PHP 8.2 through 8.5, before any application code runs. Patch matrix, interim mitigations, and how to run the same AI-assisted patch triage Wiz used.

· updated October 26, 2026

Automated CVE triage and PoC verification with cve.now MCP and unst33r-deepseek

Connect the free cve.now MCP vulnerability feed to an OpenClaw or Hermes security agent backed by unst33r-deepseek to check lockfiles, trace reachable sinks, draft regression PoCs, and budget continuous CVE verification without mid-run refusals.

From prompt injection to RCE: Testing agents against recent LangChain, MCP, and Semantic Kernel CVEs

How recent CVEs in LangChain, Model Context Protocol (MCP), and Semantic Kernel turn prompt injection into remote code execution, and how to test your own agents with Promptfoo, PyRIT, and Garak using UNST33R attacker models.