Tag: attacker

—

by

Source URL: https://simonwillison.net/2025/Sep/19/notion-lethal-trifecta/ Source: Simon Willison’s Weblog Title: The Hidden Risk in Notion 3.0 AI Agents: Web Search Tool Abuse for Data Exfiltration Feedly Summary: The Hidden Risk in Notion 3.0 AI Agents: Web Search Tool Abuse for Data Exfiltration Abi Raghuram reports that Notion 3.0, released yesterday, introduces new prompt injection data exfiltration vulnerabilities…

The Register: Ivanti EPMM holes let miscreants plant shady listeners, CISA says

—

by

Source URL: https://www.theregister.com/2025/09/19/cisa_ivanti_bugs_exploited/ Source: The Register Title: Ivanti EPMM holes let miscreants plant shady listeners, CISA says Feedly Summary: Unnamed org compromised with two malware sets An unknown attacker has abused a couple of flaws in Ivanti Endpoint Manager Mobile (EPMM) and deployed two sets of malware against an unnamed organization, according to the US…

Slashdot: This Microsoft Entra ID Vulnerability Could Have Been Catastrophic

—

by

Source URL: https://it.slashdot.org/story/25/09/19/027208/this-microsoft-entra-id-vulnerability-could-have-been-catastrophic?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: This Microsoft Entra ID Vulnerability Could Have Been Catastrophic Feedly Summary: AI Summary and Description: Yes Summary: The text discusses significant vulnerabilities identified in Microsoft’s Entra ID identity platform, which could have potentially granted unauthorized administrative access to Azure accounts. The rapid response from Microsoft following the discovery showcases…

The Register: OpenAI plugs ShadowLeak bug in ChatGPT that let miscreants raid inboxes

—

by

Source URL: https://www.theregister.com/2025/09/19/openai_shadowleak_bug/ Source: The Register Title: OpenAI plugs ShadowLeak bug in ChatGPT that let miscreants raid inboxes Feedly Summary: Radware says flaw enabled hidden email prompts to trick Deep Research agent into exfiltrating sensitive data ChatGPT’s research assistant sprung a leak – since patched – that let attackers steal Gmail secrets with just a…

The Register: Crims bust through SonicWall to grab sensitive config data

Sep 18, 2025

—

by

Source URL: https://www.theregister.com/2025/09/18/sonicwall_breach/ Source: The Register Title: Crims bust through SonicWall to grab sensitive config data Feedly Summary: Vendor pulls plug on cloud backup feature, urges admins to reset passwords and re-secure devices SonicWall is telling some customers to reset passwords after attackers broke into its cloud backup service and accessed firewall configuration data.… AI…

Wired: This Microsoft Entra ID Vulnerability Could Have Caused a Digital Catastrophe

Sep 18, 2025

—

by

Source URL: https://www.wired.com/story/microsoft-entra-id-vulnerability-digital-catastrophe/ Source: Wired Title: This Microsoft Entra ID Vulnerability Could Have Caused a Digital Catastrophe Feedly Summary: A pair of flaws in Microsoft’s Entra ID identity and access management system could have allowed an attacker to gain access to virtually all Azure customer accounts. AI Summary and Description: Yes Summary: The identified vulnerabilities…

Cloud Blog: How to secure your remote MCP server on Google Cloud

Sep 17, 2025

—

by

Source URL: https://cloud.google.com/blog/products/identity-security/how-to-secure-your-remote-mcp-server-on-google-cloud/ Source: Cloud Blog Title: How to secure your remote MCP server on Google Cloud Feedly Summary: As enterprises increasingly adopt model context protocol (MCP) to extend capabilities of AI models to better integrate with external tools, databases, and APIs, it becomes even more important to ensure secure MCP deployment. MCP unlocks new…

The Register: Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack

Sep 17, 2025

—

by

Source URL: https://www.theregister.com/2025/09/17/ddr5_dram_rowhammer/ Source: The Register Title: Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack Feedly Summary: Google and ETH Zurich found problems with AMD/SK Hynix combo, will probe other hardware Researchers from Google and Swiss university ETH Zurich have found a new class of Rowhammer vulnerability that could allow attackers to access info stored…

The Register: Self-propagating worm fuels latest npm supply chain compromise

Sep 16, 2025

—

by