Experimental News Clipping Site

Tag: access

  • Simon Willison’s Weblog: Supabase MCP can leak your entire SQL database

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: Supabase MCP can leak your entire SQL database Feedly Summary: Supabase MCP can leak your entire SQL database Here’s yet another example of a lethal trifecta attack, where an LLM system combines access to private data, exposure to potentially malicious instructions and a mechanism to communicate data…

  • Slashdot: Microsoft Open Sources Copilot Chat for VS Code on GitHub

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/07/05/1935203/microsoft-open-sources-copilot-chat-for-vs-code-on-github Source: Slashdot Title: Microsoft Open Sources Copilot Chat for VS Code on GitHub Feedly Summary: AI Summary and Description: Yes Summary: Microsoft has open-sourced the GitHub Copilot Chat extension for VS Code, allowing developers to access its internal workings, including data handling and telemetry. This transparency is significant for security, as it…

  • Slashdot: Two Sudo Vulnerabilities Discovered and Patched

    —

    by

    Kurt Seifried
    in

    Source URL: https://linux.slashdot.org/story/25/07/05/0323220/two-sudo-vulnerabilities-discovered-and-patched?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Two Sudo Vulnerabilities Discovered and Patched Feedly Summary: AI Summary and Description: Yes Summary: The text discusses recently disclosed security vulnerabilities in Sudo that allow local attackers to escalate their privileges. Researchers have identified two critical flaws, CVE-2025-32462 and CVE-2025-32463, which could potentially expose systems to security risks and…

  • Slashdot: AI Coding Agents Are Already Commoditized

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/07/04/191224/ai-coding-agents-are-already-commoditized?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: AI Coding Agents Are Already Commoditized Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the commoditization of AI coding agents, arguing that recent advancements in AI models have leveled the playing field, making powerful coding agents accessible without unique technical advantages. Sean Goedecke emphasizes that the…

  • Simon Willison’s Weblog: awwaiid/gremllm

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/4/gremllm/#atom-everything Source: Simon Willison’s Weblog Title: awwaiid/gremllm Feedly Summary: awwaiid/gremllm Delightfully cursed Python library by Brock Wilcox, built on top of LLM: from gremllm import Gremllm counter = Gremllm(“counter") counter.value = 5 counter.increment() print(counter.value) # 6? print(counter.to_roman_numerals()) # VI? You tell your Gremllm what it should be in the constructor, then it uses…

  • Simon Willison’s Weblog: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/3/rate-limiting-by-ip/#atom-everything Source: Simon Willison’s Weblog Title: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules Feedly Summary: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules My blog started timing out on some requests a few days ago, and it turned out there were misbehaving crawlers that were spidering my /search/…

  • Docker: 5 Best Practices for Building, Testing, and Packaging MCP Servers 

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/mcp-server-best-practices/ Source: Docker Title: 5 Best Practices for Building, Testing, and Packaging MCP Servers  Feedly Summary: We recently launched a new, reimagined Docker MCP Catalog with improved discovery and a new submission process. Containerized MCP servers offer a secure way to run and scale agentic applications and minimize risks tied to host access…

  • Cisco Security Blog: Secure Your Business With Cisco Hybrid Mesh Firewall Solutions

    —

    by

    Kurt Seifried
    in

    Source URL: https://feedpress.me/link/23535/17068442/secure-your-business-with-cisco-hybrid-mesh-firewall Source: Cisco Security Blog Title: Secure Your Business With Cisco Hybrid Mesh Firewall Solutions Feedly Summary: Cisco Hybrid Mesh Firewall provides advanced security for hybrid cloud environments, remote workforces, and AI-powered innovations. AI Summary and Description: Yes Summary: The Cisco Hybrid Mesh Firewall is significant in enhancing security within hybrid cloud architectures,…

  • CSA: What MITRE ATT&CK v17 Means for ESXi Security

    —

    by

    Kurt Seifried
    in

    Source URL: https://valicyber.com/resources/mitre-attck-v17-esxi/ Source: CSA Title: What MITRE ATT&CK v17 Means for ESXi Security Feedly Summary: AI Summary and Description: Yes Summary: The article discusses the introduction of the ESXi matrix in MITRE ATT&CK v17, emphasizing its significance for securing hypervisors as critical attack surfaces. It identifies high-risk TTPs (Tactics, Techniques, and Procedures) specific to…