Tag: 2025

—

by

Source URL: https://simonwillison.net/2025/Sep/26/agentforce/#atom-everything Source: Simon Willison’s Weblog Title: ForcedLeak: AI Agent risks exposed in Salesforce AgentForce Feedly Summary: ForcedLeak: AI Agent risks exposed in Salesforce AgentForce Classic lethal trifecta image exfiltration bug reported against Salesforce AgentForce by Sasi Levi and Noma Security. Here the malicious instructions come in via the Salesforce Web-to-Lead feature. When a…

Unit 42: Threat Insights: Active Exploitation of Cisco ASA Zero Days

—

by

Source URL: https://unit42.paloaltonetworks.com/zero-day-vulnerabilities-affect-cisco-software/ Source: Unit 42 Title: Threat Insights: Active Exploitation of Cisco ASA Zero Days Feedly Summary: CVE-2025-20333, CVE-2025-20362 and CVE-2025-20363 affect multiple Cisco products, and are being exploited by a threat actor linked to the ArcaneDoor campaign. The post Threat Insights: Active Exploitation of Cisco ASA Zero Days appeared first on Unit 42.…

Simon Willison’s Weblog: How to stop AI’s “lethal trifecta”

—

by

Source URL: https://simonwillison.net/2025/Sep/26/how-to-stop-ais-lethal-trifecta/ Source: Simon Willison’s Weblog Title: How to stop AI’s “lethal trifecta” Feedly Summary: How to stop AI’s “lethal trifecta” This is the second mention of the lethal trifecta in the Economist in just the last week! Their earlier coverage was Why AI systems may never be secure on September 22nd – I…

The Register: Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects

—

by

Source URL: https://www.theregister.com/2025/09/26/microsoft_xcsset_macos/ Source: The Register Title: Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects Feedly Summary: Upgraded nasty slips into Xcode builds, steals crypto, and disables macOS defenses The long-running XCSSET malware strain has evolved again, with Microsoft warning of a new macOS variant that expands its bag of tricks while…

The Register: Salesforce facing multiple lawsuits after Salesloft breach

—

by

Source URL: https://www.theregister.com/2025/09/26/salesforce_class_actions/ Source: The Register Title: Salesforce facing multiple lawsuits after Salesloft breach Feedly Summary: CRM giant denies security shortcomings as claims allege stolen data used for ID theft Salesforce is facing a wave of lawsuits in the wake of a cyberattack that exposed customer data.… AI Summary and Description: Yes Summary: Salesforce is…

The Register: Google fuses SQL, Python, and Spark in Colab Enterprise push

—

by

Source URL: https://www.theregister.com/2025/09/26/google_colab_enterprise_update/ Source: The Register Title: Google fuses SQL, Python, and Spark in Colab Enterprise push Feedly Summary: Move comes as Snowflake and Databricks chase the same all-in-one analytics dream Google is promising a single notebook environment for machine learning and data analytics, integrating SQL, Python, and Apache Spark in one place.… AI Summary…

The Register: LockBit’s new variant is ‘most dangerous yet,’ hitting Windows, Linux and VMware ESXi

—

by

Source URL: https://www.theregister.com/2025/09/26/lockbits_new_variant_is_most/ Source: The Register Title: LockBit’s new variant is ‘most dangerous yet,’ hitting Windows, Linux and VMware ESXi Feedly Summary: Operation Cronos didn’t kill LockBit – it just came back meaner Trend Micro has sounded the alarm over the new LockBit 5.0 ransomware strain, which it warns is “significantly more dangerous" than past…

The Register: ‘An attacker’s playground:’ Crims exploit GoAnywhere perfect-10 bug

—

by

Source URL: https://www.theregister.com/2025/09/26/an_apts_playground_goanywhere_perfect10/ Source: The Register Title: ‘An attacker’s playground:’ Crims exploit GoAnywhere perfect-10 bug Feedly Summary: Researchers say tens of thousands of instances remain publicly reachable Security researchers have confirmed that threat actors have exploited the maximum-severity vulnerability affecting Fortra’s GoAnywhere managed file transfer (MFT), and chastised the vendor for a lack of transparency.……

The Register: Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales

—

by