In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all previous instructions and…”) is embedded in a specially crafted prose wrapper. […]

# Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability 10 Sep 2026 – Posted by Szymon Drosdzol ### Incipit Bug bounty initiatives can be a useful tool for companies to source security research focused on their products and get ahead of attackers. From a security researcher’s perspective, it’s […]

Continuous fuzzing platforms such as OSS-Fuzz uncover large numbers of vulnerabilities, yet the subsequent repair process remains largely manual. Unfortunately, existing Automated Vulnerability Repair (AVR) techniques—including recent LLM-based systems—are not directly applicable to continuous fuzzing. This is because these systems are designed and evaluated on a static, single-run benchmark setting, […]

TALOS-2026-2445 CVE-2026-80093 A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver (version(s): 10.0.26100.8457 (WinBuild.160101.0800) and 10.0.26100.8655 (WinBuild.160101.0800)). A specially crafted sequence of Cloud Filter API calls can lead to type confusion. An attacker can execute a dedicated application to trigger this vulnerability. The […]

Research by: **Alexey Bukhteyev** Over the past several years, AI assistants have moved far beyond text generation. Modern systems can execute code, install additional dependencies, analyze user files, and access data through connected services. These capabilities significantly increase the practical value of LLMs, but they also change the security model: […]

Research by: Amit Yardeni Since mid-2025, Check Point Research has tracked a sustained campaign against Brazilian organizations. The tradecraft points to a Chinese-speaking cybercrime group connected to Earth Berberoka, an actor first documented targeting gambling sites across Asia. Once inside a victim, the group deploys a broad Linux toolkit: a […]

### Uh oh! There was an error while loading. Please reload this page. **security-research** Public # Cross-Frame Scripting (XFS) via Background Proxy in Vimium ## Package ## Affected versions ## Patched versions ## Description ### Summary Vimium’s background script provides an `openUrlInCurrentTab` message handler that allows content scripts to request […]

**Research by:** hasherezade JSCeal is a stealer delivered as compiled V8 bytecode ( `.jsc`) and executed by a bundled Node.js runtime, targeting cryptocurrency applications (other vendors also tag it with the names WEEVILPROXY or MeadowLocust). Its campaign activity dates back to March 2024 [1]; Check Point Research has been tracking the […]

# Simulating legitimate Active Directory services on the network: the case of GPO exploitation Simulating legitimate Active Directory services on an internal network is a powerful and versatile capability that can be leveraged in various contexts. Many examples of exploits relying on the ability to simulate working LDAP and/or SMB […]

Hacking Lab Hacking Lab Home People Publications Contact Light Dark Automatic MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear) Kyeongmin Kim , Insu Yun November 2026 Cite Publication Proceedings of the 33rd ACM Conference on Computer and Communications Security (CCS) Cite ×Copy Download