Experimental News Clipping Site

Tag: 2024

  • The Register: Three more vulns spotted in Ivanti CSA, all critical, one 10/10

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/12/11/ivanti_vulns_critical/ Source: The Register Title: Three more vulns spotted in Ivanti CSA, all critical, one 10/10 Feedly Summary: Patch up, everyone – that admin portal is mighty attractive to your friendly cyberattacker Ivanti just put out a security advisory warning of three critical vulnerabilities in its Cloud Services Application (CSA), including a perfect…

  • Schneier on Security: Jailbreaking LLM-Controlled Robots

    —

    by

    system automation
    in

    Source URL: https://www.schneier.com/blog/archives/2024/12/jailbreaking-llm-controlled-robots.html Source: Schneier on Security Title: Jailbreaking LLM-Controlled Robots Feedly Summary: Surprising no one, it’s easy to trick an LLM-controlled robot into ignoring its safety instructions. AI Summary and Description: Yes Summary: The text highlights a significant vulnerability in LLM-controlled robots, revealing that they can be manipulated to bypass their safety protocols. This…

  • CSA: Why Is MFA Essential for Cybersecurity?

    —

    by

    system automation
    in

    Source URL: https://cloudsecurityalliance.org/blog/2024/12/11/the-transformative-power-of-multifactor-authentication Source: CSA Title: Why Is MFA Essential for Cybersecurity? Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the importance and benefits of multifactor authentication (MFA) as a proactive security measure against unauthorized access and cyber threats. It highlights how MFA combines various verification factors to protect sensitive data, illustrating…

  • Simon Willison’s Weblog: Quoting Rob Cheung

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Dec/11/rob-cheung/ Source: Simon Willison’s Weblog Title: Quoting Rob Cheung Feedly Summary: (echo “PID COMMAND PORT USER"; lsof -i -P -n | grep LISTEN | awk ‘{print $2, $1, $9, $3}’ | sort -u | head -n 50; echo;) | column -t | llm "what servers are running on my machine and do some…

  • The Register: US names Chinese national it alleges was behind 2020 attack on Sophos firewalls

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/12/11/sichuan_silence_sophos_zeroday_sanctions/ Source: The Register Title: US names Chinese national it alleges was behind 2020 attack on Sophos firewalls Feedly Summary: Also sanctions his employer – an outfit called Sichuan Silence linked to Ragnarok ransomware The US Departments of Treasury and Justice have named a Chinese business and one of its employees as the…

  • Krebs on Security: Patch Tuesday, December 2024 Edition

    —

    by

    system automation
    in

    Source URL: https://krebsonsecurity.com/2024/12/patch-tuesday-december-2024-edition/ Source: Krebs on Security Title: Patch Tuesday, December 2024 Edition Feedly Summary: Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common……

  • Cisco Talos Blog: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities

    —

    by

    system automation
    in

    Source URL: https://blog.talosintelligence.com/december-patch-tuesday-release/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities Feedly Summary: The Patch Tuesday for December of 2024 includes 72 vulnerabilities, including four that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.”  AI Summary and Description: Yes **Summary:** The December 2024 Patch…

  • Simon Willison’s Weblog: ChatGPT Canvas can make API requests now, but it’s complicated

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Dec/10/chatgpt-canvas/#atom-everything Source: Simon Willison’s Weblog Title: ChatGPT Canvas can make API requests now, but it’s complicated Feedly Summary: Today’s 12 Days of OpenAI release concerned ChatGPT Canvas, a new ChatGPT feature that enables ChatGPT to pop open a side panel with a shared editor in it where you can collaborate with ChatGPT on…

  • Hacker News: AMD’s trusted execution environment blown wide open by new BadRAM attack

    —

    by

    system automation
    in

    Source URL: https://arstechnica.com/information-technology/2024/12/new-badram-attack-neuters-security-assurances-in-amd-epyc-processors/ Source: Hacker News Title: AMD’s trusted execution environment blown wide open by new BadRAM attack Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses significant vulnerabilities related to physical access to cloud servers, particularly spotlighting a proof-of-concept attack known as BadRAM that exploits security assurances offered by AMD’s microprocessors.…

  • Alerts: Adobe Releases Security Updates for Multiple Products

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/12/10/adobe-releases-security-updates-multiple-products Source: Alerts Title: Adobe Releases Security Updates for Multiple Products Feedly Summary: Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Acrobat, Adobe Illustrator, and Adobe InDesign. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.       CISA encourages users…