Tagged "vulnerability-management"
9 articles tagged vulnerability-management, 17 February 2026 to 21 May 2026. Newest first.
-
Auditing Apple's DifferentialPrivacy.framework: Bugs, Misconfig, Practical Risks
Security researchers audit Apple's DifferentialPrivacy framework and reveal implementation bugs and misconfigurations that impact privacy guarantees for on-device machine learning applications.
-
AI, open code and vulnerability risk in the public sector
UK government guidance addresses security considerations for deploying AI and open-source code in public sector systems. Essential reading for organizations deploying local LLMs in regulated or high-security environments.
-
Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
A critical vulnerability in Ollama's GGUF parser enables remote attackers to read sensitive process memory, potentially exposing model weights and user data. This vulnerability affects all versions of Ollama and requires immediate patching for production deployments.
-
Critical Ollama Memory Leak Vulnerability Exposes 300,000 Servers Globally
A critical memory leak vulnerability has been discovered in Ollama, affecting approximately 300,000 servers worldwide. This security flaw poses significant risks to self-hosted and edge LLM deployments that rely on Ollama.
-
Critical Ollama Memory Leak Vulnerability Exposes 300,000 Servers Globally
A severe memory leak vulnerability has been discovered in Ollama, affecting approximately 300,000 servers worldwide. This security issue highlights the importance of keeping local LLM deployment frameworks updated and properly configured.
-
Critical Security Vulnerabilities in Ollama Auto-Updater Enable Remote Code Execution
Researchers discovered unpatched flaws in Ollama's auto-updater that could allow persistent remote code execution on local deployments. This affects a significant portion of self-hosted Ollama instances and highlights the importance of security practices in local LLM infrastructure.
-
Thinking Outside the Box: New Attack Surfaces in Sandboxed AI Agents
Security research identifies novel attack vectors in sandboxed AI agent deployments, highlighting critical considerations for self-hosted and edge inference systems. Understanding these vulnerabilities is essential for practitioners securing local LLM implementations.
-
We Audited the Security of 7 Open-Source AI Agents – Here Is What We Found
A comprehensive security audit of popular open-source AI agents reveals vulnerabilities and best practices for securing locally-deployed agentic systems, critical for production deployments.
-
I broke into my own AI system in 10 minutes. I built it
Security researcher demonstrates critical vulnerabilities in self-built AI systems, highlighting the importance of hardening locally-deployed models against common attack vectors.