Experimental News Clipping Site

Tag: attack

  • The Register: Lazarus Group cloned open source projects to plant backdoors, steal credentials

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/29/lazarus_groups_supply_chain_attack/ Source: The Register Title: Lazarus Group cloned open source projects to plant backdoors, steal credentials Feedly Summary: Stealing crypto is so 2024. Supply-chain attacks leading to data exfil pays off better? North Korea’s Lazarus Group compromised hundreds of victims across the globe in a massive secret-stealing supply chain attack that was ongoing…

  • Unit 42: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/?p=138128 Source: Unit 42 Title: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia Feedly Summary: A Chinese-linked espionage campaign targeted entities in South Asia using rare techniques like DNS exfiltration, with the aim to steal sensitive data. The post CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia appeared first…

  • Hacker News: A minimal PyTorch implementation for training your own small LLM from scratch

    —

    by

    Kurt Seifried
    in

    Source URL: https://github.com/Om-Alve/smolGPT Source: Hacker News Title: A minimal PyTorch implementation for training your own small LLM from scratch Feedly Summary: Comments AI Summary and Description: Yes **Summary:** This text describes a minimal PyTorch implementation for training a small Language Model (LLM) from scratch, intended primarily for educational purposes. It showcases modern techniques in LLM…

  • Simon Willison’s Weblog: How we estimate the risk from prompt injection attacks on AI systems

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/29/prompt-injection-attacks-on-ai-systems/ Source: Simon Willison’s Weblog Title: How we estimate the risk from prompt injection attacks on AI systems Feedly Summary: How we estimate the risk from prompt injection attacks on AI systems The “Agentic AI Security Team" at Google DeepMind share some details on how they are researching indirect prompt injection attacks. They…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/29/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation, as confirmed by Fortinet. CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors…

  • Slashdot: Chinese and Iranian Hackers Are Using US AI Products To Bolster Cyberattacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/01/29/1730253/chinese-and-iranian-hackers-are-using-us-ai-products-to-bolster-cyberattacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Chinese and Iranian Hackers Are Using US AI Products To Bolster Cyberattacks Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the increasing use of AI technologies, specifically Google’s Gemini chatbot, by foreign hackers from countries like China, Iran, Russia, and North Korea to enhance their cyberattack…

  • The Register: Why is my Mitel phone DDoSing strangers? Oh, it was roped into a new Mirai botnet

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/29/ddos_attacks_aquabot_mitel/ Source: The Register Title: Why is my Mitel phone DDoSing strangers? Oh, it was roped into a new Mirai botnet Feedly Summary: And now you won’t stop calling me, I’m kinda busy A new variant of the Mirai-based malware Aquabot is actively exploiting a vulnerability in Mitel phones to build a remote-controlled…

  • NCSC Feed: Preserving integrity in the age of generative AI

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ncsc.gov.uk/blog-post/preserving-integrity-in-age-generative-ai Source: NCSC Feed Title: Preserving integrity in the age of generative AI Feedly Summary: New ‘Content Credentials’ guidance from the NSA seeks to counter the erosion of trust. AI Summary and Description: Yes Summary: The text discusses the challenges posed by AI technologies in establishing trustworthiness of online content due to the…

  • CSA: How Does Zero Trust Transform Privileged Access Management?

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/zero-trust-approach-to-privileged-access-management Source: CSA Title: How Does Zero Trust Transform Privileged Access Management? Feedly Summary: AI Summary and Description: Yes Summary: The text emphasizes the significance of adopting a zero trust mindset for Privileged Access Management (PAM), highlighting crucial security strategies like continuous verification, adaptive authentication, and just-in-time access. It addresses the challenges posed…

  • Cloud Blog: Adversarial Misuse of Generative AI

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai/ Source: Cloud Blog Title: Adversarial Misuse of Generative AI Feedly Summary: Rapid advancements in artificial intelligence (AI) are unlocking new possibilities for the way we work and accelerating innovation in science, technology, and beyond. In cybersecurity, AI is poised to transform digital defense, empowering defenders and enhancing our collective security. Large language…