Tag: after

  • Simon Willison’s Weblog: Quoting Sean Heelan

    Source URL: https://simonwillison.net/2025/May/24/sean-heelan/ Source: Simon Willison’s Weblog Title: Quoting Sean Heelan Feedly Summary: The vulnerability [o3] found is CVE-2025-37899 (fix here), a use-after-free in the handler for the SMB ‘logoff’ command. Understanding the vulnerability requires reasoning about concurrent connections to the server, and how they may share various objects in specific circumstances. o3 was able…

  • The Register: CISA says SaaS providers in firing line after Commvault zero-day Azure attack

    Source URL: https://www.theregister.com/2025/05/23/cisa_commvault_zero_day/ Source: The Register Title: CISA says SaaS providers in firing line after Commvault zero-day Azure attack Feedly Summary: Cyberbaddies are coming for your M365 creds, US infosec agency warns The Cybersecurity and Infrastructure Security Agency (CISA) is warning that SaaS companies are under fire from criminals on the prowl for cloud apps…

  • Simon Willison’s Weblog: Remote Prompt Injection in GitLab Duo Leads to Source Code Theft

    Source URL: https://simonwillison.net/2025/May/23/remote-prompt-injection-in-gitlab-duo/ Source: Simon Willison’s Weblog Title: Remote Prompt Injection in GitLab Duo Leads to Source Code Theft Feedly Summary: Remote Prompt Injection in GitLab Duo Leads to Source Code Theft Yet another example of the classic Markdown image exfiltration attack, this time affecting GitLab Duo – GitLab’s chatbot. Omer Mayraz reports on how…

  • Krebs on Security: Oops: DanaBot Malware Devs Infected Their Own PCs

    Source URL: https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/ Source: Krebs on Security Title: Oops: DanaBot Malware Devs Infected Their Own PCs Feedly Summary: The U.S. government today unsealed criminal charges against 16 individuals accused of operating and selling DanaBot, a prolific strain of information-stealing malware that has been sold on Russian cybercrime forums since 2018. The FBI says a newer…

  • Cloud Blog: Cloud CISO Perspectives: How Google Cloud’s security team helps build securely

    Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-how-google-cloud-security-team-helps-build-securely/ Source: Cloud Blog Title: Cloud CISO Perspectives: How Google Cloud’s security team helps build securely Feedly Summary: Welcome to the first Cloud CISO Perspectives for May 2025. Today, Iain Mulholland, senior director, Security Engineering, pulls back the curtain on how Google Cloud approaches security engineering and how we take secure by design…

  • Slashdot: KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

    Source URL: https://tech.slashdot.org/story/25/05/20/2215258/krebsonsecurity-hit-with-near-record-63-tbps-ddos?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a massive DDoS attack attributed to the Aisuru IoT botnet, marking it as a significant event in the realm of cybersecurity. It highlights how this attack was likely a demonstration of…

  • Cloud Blog: Expanding Vertex AI with the next wave of generative AI media models

    Source URL: https://cloud.google.com/blog/products/ai-machine-learning/announcing-veo-3-imagen-4-and-lyria-2-on-vertex-ai/ Source: Cloud Blog Title: Expanding Vertex AI with the next wave of generative AI media models Feedly Summary: Today, we are introducing the next wave of generative AI media models on Vertex AI: Imagen 4, Veo 3, and Lyria 2.  We’ve already seen customers generate stunning, photorealistic images with Imagen 3, Google’s…