Product
high
advisory
Use-After-Free Vulnerability in llama-server
1 TTP 2 CVEsA use-after-free vulnerability in llama-server allows for potential remote code execution via a TOCTOU race condition in tokenization endpoints when using the --sleep-idle-seconds configuration.
llama-server +1
1t
2c
medium
advisory
GenAI Process Connection to Unusual Domain on macOS
2 rules 1 TTPThis rule detects GenAI tools on macOS connecting to unusual domains, potentially indicating command and control activity, data exfiltration, or malicious payload retrieval following compromise via prompt injection, malicious MCP servers, or poisoned plugins.
Copilot +22
genai
command and control
macos
network connection
2r
1t