The Open Source Technology Improvement Fund announced the completion of a security audit of Cortex, an open-source storage for Prometheus and OpenTelemetry. Conducted by Quarkslab and supported by the…
Security researchers chained multiple large language model and web application vulnerabilities during a red team exercise to escalate from a low-privileged account to full admin takeover. The attack e…
Quarkslab's Red Team chained multiple LLM and traditional web vulnerabilities to escalate from a low-privileged user to an admin account takeover during a customer engagement. The attack exploited ins…
A red team exercise chained LLM prompt injection and web vulnerabilities to achieve admin account takeover from a low-privileged account. The attack exploited insecure output handling in an AI medical…