Tag: attacks

Source URL: https://unit42.paloaltonetworks.com/initial-access-broker-exploits-leaked-machine-keys/ Source: Unit 42 Title: GoldMelody’s Hidden Chords: Initial Access Broker In-Memory IIS Modules Revealed Feedly Summary: An IAB campaign exploited leaked ASP.NET Machine Keys. We dissect the attacker’s infrastructure, campaign and offer takeaways for blue teams. The post GoldMelody’s Hidden Chords: Initial Access Broker In-Memory IIS Modules Revealed appeared first on Unit…

The Register: Scholars sneaking phrases into papers to fool AI reviewers

—

by

Source URL: https://www.theregister.com/2025/07/07/scholars_try_to_fool_llm_reviewers/ Source: The Register Title: Scholars sneaking phrases into papers to fool AI reviewers Feedly Summary: Using prompt injections to play a Jedi mind trick on LLMs A handful of international computer science researchers appear to be trying to influence AI reviews with a new class of prompt injection attack.… AI Summary and…

Simon Willison’s Weblog: Quoting Aphyr

—

by

Source URL: https://simonwillison.net/2025/Jul/7/aphyr/#atom-everything Source: Simon Willison’s Weblog Title: Quoting Aphyr Feedly Summary: I strongly suspect that Market Research Future, or a subcontractor, is conducting an automated spam campaign which uses a Large Language Model to evaluate a Mastodon instance, submit a plausible application for an account, and to post slop which links to Market Research…

Microsoft Security Blog: Learn how to build an AI-powered, unified SOC in new Microsoft e-book

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/07/07/learn-how-to-build-an-ai-powered-unified-soc-in-new-microsoft-e-book/ Source: Microsoft Security Blog Title: Learn how to build an AI-powered, unified SOC in new Microsoft e-book Feedly Summary: Read Coordinated Defense: Building an AI-powered, unified SOC, the new e-book on how organizations can unify security operations to better meet the challenges of today’s cyberthreat landscape. The post Learn how to build…

The Register: Phishing platforms, infostealers blamed as identity attacks soar

—

by

Source URL: https://www.theregister.com/2025/07/07/phishing_platforms_infostealers_blamed_for/ Source: The Register Title: Phishing platforms, infostealers blamed as identity attacks soar Feedly Summary: Get your creds in order or risk BEC, ransomware attacks, orgs warned A rise in advanced phishing kits and info-stealing malware are to blame for a 156 percent jump in cyberattacks targeting user logins, say researchers.… AI Summary…

Slashdot: The FSF Faces Active ‘Ongoing and Increasing’ DDoS Attacks

Jul 6, 2025

—

by

Source URL: https://news.slashdot.org/story/25/07/06/1737253/the-fsf-faces-active-ongoing-and-increasing-ddos-attacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The FSF Faces Active ‘Ongoing and Increasing’ DDoS Attacks Feedly Summary: AI Summary and Description: Yes **Summary:** The Free Software Foundation (FSF) is grappling with ongoing Distributed Denial of Service (DDoS) attacks, primarily attributed to botnets and potential Large Language Model (LLM) scrapers. Despite these challenges, their critical infrastructure…

The Register: Ingram Micro confirms ransomware behind multi-day outage

Jul 6, 2025

—

by

Source URL: https://www.theregister.com/2025/07/06/ingram_micro_confirms_ransomware_behind/ Source: The Register Title: Ingram Micro confirms ransomware behind multi-day outage Feedly Summary: SafePay crew claims responsibility for intrusion at one of world’s largest tech distributors Ingram Micro, one of the world’s largest distributors, has confirmed it is trying to restore systems following a ransomware attack.… AI Summary and Description: Yes Summary:…

Simon Willison’s Weblog: Supabase MCP can leak your entire SQL database

Jul 6, 2025

—

by

Source URL: https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: Supabase MCP can leak your entire SQL database Feedly Summary: Supabase MCP can leak your entire SQL database Here’s yet another example of a lethal trifecta attack, where an LLM system combines access to private data, exposure to potentially malicious instructions and a mechanism to communicate data…

Slashdot: XBOW’s AI-Powered Pentester Grabs Top Rank on HackerOne, Raises $75M to Grow Platform

Jul 5, 2025

—

by