Experimental News Clipping Site

Tag: breaches

  • The Register: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/22/ssl_com_validation_flaw/ Source: The Register Title: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps Feedly Summary: 10 other certificates ‘were mis-issued and have now been revoked’ Certificate issuer SSL.com’s domain validation system had an unfortunate bug that was exploited by miscreants to obtain, without authorization, digital certs for…

  • CSA: Defending Against SSRF Attacks in Cloud Native Apps

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.sweet.security/blog/defending-against-ssrf-attacks-in-cloud-native-applications Source: CSA Title: Defending Against SSRF Attacks in Cloud Native Apps Feedly Summary: AI Summary and Description: Yes Summary: The text outlines the increasing prevalence of Server-Side Request Forgery (SSRF) attacks, particularly in cloud environments, as exemplified by a real incident involving a Fintech customer of Sweet Security. It emphasizes the limitations…

  • The Register: 4chan, the ‘internet’s litter box,’ appears to have been pillaged by rival forum

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/15/4chan_breached/ Source: The Register Title: 4chan, the ‘internet’s litter box,’ appears to have been pillaged by rival forum Feedly Summary: Source code, moderator info, IP addresses, more allegedly swiped and leaked Thousands of 4chan users reported outages Monday night amid rumors on social media that the edgy anonymous imageboard had been ransacked by…

  • The Register: Chinese snoops use stealth RAT to backdoor US orgs – still active last week

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/15/chinese_spies_backdoored_us_orgs/ Source: The Register Title: Chinese snoops use stealth RAT to backdoor US orgs – still active last week Feedly Summary: Let the espionage and access resale campaigns begin (again) A cyberspy crew or individual with ties to China’s Ministry of State Security has infected global organizations with a remote access trojan (RAT)…

  • The Register: Where it Hertz: Customer data driven off in Cleo attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/15/hertz_cleo_customer_data/ Source: The Register Title: Where it Hertz: Customer data driven off in Cleo attacks Feedly Summary: Car hire biz takes your privacy seriously, though Car hire giant Hertz has confirmed that customer information was stolen during the zero-day data raids on Cleo file transfer products last year.… AI Summary and Description: Yes…

  • CSA: Preparing for PCI DSS V4.X

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.vikingcloud.com/blog/final-countdown-to-compliance-preparing-for-pci-dss-v4-x Source: CSA Title: Preparing for PCI DSS V4.X Feedly Summary: AI Summary and Description: Yes Summary: The text elaborates on the impending mandatory compliance requirements under PCI DSS v4.x, emphasizing the importance for organizations to transition from PCI DSS v3.2.1. With a critical deadline looming, the document outlines major changes, such as…

  • OpenAI : Introducing GPT-4.1 in the API

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/gpt-4-1 Source: OpenAI Title: Introducing GPT-4.1 in the API Feedly Summary: Introducing GPT-4.1 in the API—a new family of models with across-the-board improvements, including major gains in coding, instruction following, and long-context understanding. We’re also releasing our first nano model. Available to developers worldwide starting today. AI Summary and Description: Yes Summary: The…

  • Simon Willison’s Weblog: Note on 14th April 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Apr/14/believe/ Source: Simon Willison’s Weblog Title: Note on 14th April 2025 Feedly Summary: Believing AI vendors who promise you that they won’t train on your data is a huge competitive advantage these days. Tags: llms, generative-ai, ai AI Summary and Description: Yes Summary: The assertion regarding AI vendors’ claims about not training on…