Experimental News Clipping Site

Tag: Act

  • Docker: MCP Horror Stories: The Drive-By Localhost Breach

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/mpc-horror-stories-cve-2025-49596-local-host-breach/ Source: Docker Title: MCP Horror Stories: The Drive-By Localhost Breach Feedly Summary: This is Part 4 of our MCP Horror Stories series, where we examine real-world security incidents that expose the devastating vulnerabilities in AI infrastructure and demonstrate how Docker MCP Gateway provides enterprise-grade protection against sophisticated attack vectors. The Model Context…

  • Anchore: Strengthening Software Security: The Anchore and Chainguard Partnership

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/chainguard-partnership/ Source: Anchore Title: Strengthening Software Security: The Anchore and Chainguard Partnership Feedly Summary: In 2018, Anchore partnered with the US Air Force on Platform One, a project focused on integrating DevSecOps principles into government software development. A core part of that project was the launch of the Iron Bank, a repository of…

  • Schneier on Security: Apple’s New Memory Integrity Enforcement

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/09/apples-new-memory-integrity-enforcement.html Source: Schneier on Security Title: Apple’s New Memory Integrity Enforcement Feedly Summary: Apple has introduced a new hardware/software security feature in the iPhone 17: “Memory Integrity Enforcement,” targeting the memory safety vulnerabilities that spyware products like Pegasus tend to use to get unauthorized system access. From Wired: In recent years, a movement…

  • The Register: Suspected Iran-backed attackers targeting European aerospace sector with novel malware

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/23/iran_targeting_european_aerospace/ Source: The Register Title: Suspected Iran-backed attackers targeting European aerospace sector with novel malware Feedly Summary: Instead of job offers, victims get MiniJunk backdoor and MiniBrowse stealer Suspected Iranian government-backed online attackers have expanded their European cyber ops with fake job portals and new malware targeting organizations in the defense, manufacturing, telecommunications,…

  • Simon Willison’s Weblog: Why AI systems might never be secure

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Sep/23/why-ai-systems-might-never-be-secure/#atom-everything Source: Simon Willison’s Weblog Title: Why AI systems might never be secure Feedly Summary: Why AI systems might never be secure The Economist have a new piece out about LLM security, with this headline and subtitle: Why AI systems might never be secure A “lethal trifecta” of conditions opens them to abuse…

  • Slashdot: Google’s Gemini AI Is Coming To Your TV

    —

    by

    Kurt Seifried
    in

    Source URL: https://entertainment.slashdot.org/story/25/09/22/2257230/googles-gemini-ai-is-coming-to-your-tv?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google’s Gemini AI Is Coming To Your TV Feedly Summary: AI Summary and Description: Yes Summary: Google’s Gemini AI assistant is being integrated into Google TV, enhancing user interactivity across over 300 million devices. This development highlights the growing trend towards conversational AI in home entertainment, retaining previous functionalities…

  • Simon Willison’s Weblog: Quoting Kate Niederhoffer, Gabriella Rosen Kellerman, Angela Lee, Alex Liebscher, Kristina Rapuano and Jeffrey T. Hancock

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Sep/22/workslop/ Source: Simon Willison’s Weblog Title: Quoting Kate Niederhoffer, Gabriella Rosen Kellerman, Angela Lee, Alex Liebscher, Kristina Rapuano and Jeffrey T. Hancock Feedly Summary: We define workslop as AI generated work content that masquerades as good work, but lacks the substance to meaningfully advance a given task. Here’s how this happens. As AI…

  • Slashdot: LinkedIn Set To Start To Train Its AI on Member Profiles

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/09/22/2118229/linkedin-set-to-start-to-train-its-ai-on-member-profiles Source: Slashdot Title: LinkedIn Set To Start To Train Its AI on Member Profiles Feedly Summary: AI Summary and Description: Yes Summary: LinkedIn’s announcement regarding the use of member profiles, posts, and public activity to train its AI models raises significant privacy and compliance concerns. The default opt-in mechanism for data collection…

  • Simon Willison’s Weblog: Four new releases from Qwen

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Sep/22/qwen/ Source: Simon Willison’s Weblog Title: Four new releases from Qwen Feedly Summary: It’s been an extremely busy day for team Qwen. Within the last 24 hours (all links to Twitter, which seems to be their preferred platform for these announcements): Qwen3-Next-80B-A3B-Instruct-FP8 and Qwen3-Next-80B-A3B-Thinking-FP8 – official FP8 quantized versions of their Qwen3-Next models.…

  • Anton on Security – Medium: Anton’s Security Blog Quarterly Q3 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://medium.com/anton-on-security/antons-security-blog-quarterly-q3-2025-74fc422be3d3?source=rss—-8e8c3ed26c4c—4 Source: Anton on Security – Medium Title: Anton’s Security Blog Quarterly Q3 2025 Feedly Summary: AI Summary and Description: Yes Summary: The provided text outlines various security topics and resources related to cloud security and AI security, emphasizing the ongoing discussions and research in these fields. It highlights key articles and podcasts…