breaches – Page 14 – Experimental News Clipping Site

Embrace The Red: Claude Code: Data Exfiltration with DNS Requests

Aug 11, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/claude-code-exfiltration-via-dns-requests/ Source: Embrace The Red Title: Claude Code: Data Exfiltration with DNS Requests Feedly Summary: Today we cover Claude Code and a high severity vulnerability that Anthropic fixed in early June. The vulnerability allowed an attacker to hijack Claude Code via indirect prompt injection and leak sensitive information from the developer’s machine, e.g.…

The Register: Trend Micro offers weak workaround for already-exploited critical vuln in management console

Aug 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/10/infosec_in_brief/ Source: The Register Title: Trend Micro offers weak workaround for already-exploited critical vuln in management console Feedly Summary: PLUS: Crypto mixer founders plead guilty; Another French telco hacked; Meta fights WhatsApp scams; And more! Infosec In Brief A critical vulnerability in the on-prem version of Trend Micro’s Apex One endpoint security platform…

The Register: The inside story of the Telemessage saga, and how you can view the data

Aug 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/10/telemessage_archive_online/ Source: The Register Title: The inside story of the Telemessage saga, and how you can view the data Feedly Summary: It turns out no one was clean on OPSEC DEF CON On Saturday at DEF CON, security boffin Micah Lee explained just how he hacked into TeleMessage, the supposedly secure messaging app…

Wired: A Misconfiguration That Haunts Corporate Streaming Platforms Could Expose Sensitive Data

Aug 8, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.wired.com/story/corporate-livestreams-exposed-search-tool/ Source: Wired Title: A Misconfiguration That Haunts Corporate Streaming Platforms Could Expose Sensitive Data Feedly Summary: A security researcher discovered that flawed API configurations are plaguing corporate livestreaming platforms, potentially exposing internal company meetings—and he’s releasing a tool to find them. AI Summary and Description: Yes Summary: The text highlights a security…

The Register: UK secretly allows facial recognition scans of passport, immigration databases

Aug 8, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/08/uk_secretly_allows_facial_recognition/ Source: The Register Title: UK secretly allows facial recognition scans of passport, immigration databases Feedly Summary: Campaigners brand Home Office’s lack of transparency as ‘astonishing’ and ‘dangerous’ Privacy groups report a surge in UK police facial recognition scans of databases secretly stocked with passport photos lacking parliamentary oversight.… AI Summary and Description:…

Docker: MCP Horror Stories: The Supply Chain Attack

Aug 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.docker.com/blog/mcp-horror-stories-the-supply-chain-attack/ Source: Docker Title: MCP Horror Stories: The Supply Chain Attack Feedly Summary: This is Part 2 of our MCP Horror Stories series, an in-depth look at real-world security incidents exposing the vulnerabilities in AI infrastructure, and how the Docker MCP Toolkit delivers enterprise-grade protection. The Model Context Protocol (MCP) promised to be…

OpenAI : GPT-5 and the new era of work

Aug 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://openai.com/index/gpt-5-new-era-of-work Source: OpenAI Title: GPT-5 and the new era of work Feedly Summary: GPT-5 is OpenAI’s most advanced model—transforming enterprise AI, automation, and workforce productivity in the new era of intelligent work. AI Summary and Description: Yes Summary: The text highlights the launch of GPT-5 by OpenAI, emphasizing its potential impacts on enterprise…

Wired: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT

Aug 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.wired.com/story/poisoned-document-could-leak-secret-data-chatgpt/ Source: Wired Title: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT Feedly Summary: Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction. AI Summary and Description: Yes Summary:…

Krebs on Security: Who Got Arrested in the Raid on the XSS Crime Forum?

Aug 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://krebsonsecurity.com/2025/08/who-got-arrested-in-the-raid-on-the-xss-crime-forum/ Source: Krebs on Security Title: Who Got Arrested in the Raid on the XSS Crime Forum? Feedly Summary: On July 22, 2025, the European police agency Europol said a long-running investigation led by the French Police resulted in the arrest of a 38-year-old administrator of XSS, a Russian-language cybercrime forum with more than…

The Register: UK’s Ministry of Defence pins hopes on AI to stop the next massive email blunder

Aug 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/06/mod_taps_aussie_ai_shop/ Source: The Register Title: UK’s Ministry of Defence pins hopes on AI to stop the next massive email blunder Feedly Summary: Australia’s Castlepoint Systems recruited to avoid repeat of Afghan breach scandal The UK’s Ministry of Defence is the latest to slap its hand on the big red AI button as it…

Tag: breaches