Mistral

Security researchers at Cisco Talos have identified CLOSEDQUORUM, a novel malware that uses multiple LLMs to autonomously select attack vectors. This 'effort displacement' allows the malware to operate continuously without needing active commands from a human attacker.

The researchers present ComPO, a new alignment paradigm that uses comparison oracles to extract directional information from preference pairs. This method effectively mitigates the risks of likelihood displacement and model verbosity seen in traditional direct alignment methods.

A critical vulnerability in Ollama allows unauthenticated attackers to trigger an out-of-bounds heap read via malicious GGUF files. This exploit can expose sensitive information like user messages and system prompts by leaking them into newly created model files.