What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Exploited CVEs are concentrated in takeover classes such as server-side RCE and privilege escalation.
1
Stories per day · 30 days
2 RSS
Relatedexploitation-patterns1
5 stories, newest first · one card per story
Stories tagged #vulnerability-analysis
Learning from Failures: A Failure-Driven Prompt Refinement for LLM-Based Vulnerability Analysis
Failure-driven prompt refinement uses recurring LLM mistakes to improve vulnerability analysis on DVJA and Juliet.
Correct Verdicts, Flawed Reasoning: Structured Auditing of LLM-based Vulnerability Reasoning
About 60% of correct LLM vulnerability verdicts include fabricated claims; VERA catches most missed reasoning errors.
An Empirical Analysis of ReDoS Vulnerabilities and ReDoS Detection Tools
Study of NVD data finds ReDoS vulnerabilities growing more prevalent and more likely to be exploited, while five detection tools disagree substantially.
Staying Ahead of Adversarial AI Through Agentic Source Code Review
Google Threat Intelligence details an agentic AI pipeline with human expert oversight to review source code and outpace AI-enabled attackers.