Experimental News Clipping Site

Tag: attack surface

  • Hacker News: Apple rearranged its XNU kernel with exclaves

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/08/kernel_sanders_apple_rearranges_xnu/ Source: Hacker News Title: Apple rearranged its XNU kernel with exclaves Feedly Summary: Comments AI Summary and Description: Yes Summary: Apple is enhancing the security of its XNU kernel through the introduction of “exclaves,” which create isolated domains that enhance protection against kernel compromises. This architectural shift aims to combine the advantages…

  • The Register: Kernel saunters – How Apple rearranged its XNU kernel with exclaves

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/08/kernel_sanders_apple_rearranges_xnu/ Source: The Register Title: Kernel saunters – How Apple rearranged its XNU kernel with exclaves Feedly Summary: iPhone giant compartmentalizes OS for the sake of security Apple has been working to harden the XNU kernel that powers its various operating systems, including iOS and macOS, with a feature called “exclaves."… AI Summary…

  • NCSC Feed: ACD 2.0: Insights from the external attack surface management trials

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ncsc.gov.uk/blog-post/active-cyber-defence-2-insights-easm-trials Source: NCSC Feed Title: ACD 2.0: Insights from the external attack surface management trials Feedly Summary: We publish the results of our ACD 2.0 external attack surface management (EASM) trials AI Summary and Description: Yes Summary: The text discusses the insights gained from the NCSC’s ACD2.0 experiments, focusing on external attack surface…

  • Hacker News: SepLLM: Accelerate LLMs by Compressing One Segment into One Separator

    —

    by

    Kurt Seifried
    in

    Source URL: https://sepllm.github.io/ Source: Hacker News Title: SepLLM: Accelerate LLMs by Compressing One Segment into One Separator Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a novel framework called SepLLM designed to enhance the performance of Large Language Models (LLMs) by improving inference speed and computational efficiency. It identifies an innovative…

  • Slashdot: Microsoft Warns of Chinese Hackers Spying on Cloud Technology

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/03/05/1743246/microsoft-warns-of-chinese-hackers-spying-on-cloud-technology?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Warns of Chinese Hackers Spying on Cloud Technology Feedly Summary: AI Summary and Description: Yes Summary: Microsoft’s report on the Silk Typhoon hacking group emphasizes how advanced persistent threats (APTs) are increasingly targeting cloud applications and remote management tools to conduct supply-chain attacks. The activities of this group…

  • Anchore: NIST SP 800-190: Overview & Compliance Checklist

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/nist-sp-800-190-overview-compliance-checklist/ Source: Anchore Title: NIST SP 800-190: Overview & Compliance Checklist Feedly Summary: This blog post has been archived and replaced by the supporting pillar page that can be found here: https://anchore.com/wp-admin/post.php?post=987474946&action=edit The blog post is meant to remain “public” so that it will continue to show on the /blog feed. This will…

  • Alerts: CISA Adds Two Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/18/cisa-adds-two-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Two Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added two vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0108 Palo Alto PAN-OS Authentication Bypass Vulnerability CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability These types of vulnerabilities are frequent attack vectors for…

  • Cloud Blog: Operationalizing generative AI apps with Apigee

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/api-management/using-apigee-api-management-for-ai/ Source: Cloud Blog Title: Operationalizing generative AI apps with Apigee Feedly Summary: Generative AI is now well  beyond the hype and into the realm of practical application. But while organizations are eager to build enterprise-ready gen AI solutions on top of large language models (LLMs), they face challenges in managing, securing, and…