caution – Page 3 – Experimental News Clipping Site

The Register: Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python

Sep 5, 2025

—

by

Source URL: https://www.theregister.com/2025/09/05/clickfix_castlerat_malware/ Source: The Register Title: Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python Feedly Summary: Pro tip, don’t install PowerShell commands without approval A team of data thieves has doubled down by developing its CastleRAT malware in both Python and C variants. Both versions spread by…

Wired: Anthropic Agrees to Pay Authors at Least $1.5 Billion in AI Copyright Settlement

Sep 5, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.wired.com/story/anthropic-settlement-lawsuit-copyright/ Source: Wired Title: Anthropic Agrees to Pay Authors at Least $1.5 Billion in AI Copyright Settlement Feedly Summary: Anthropic will pay at least $3,000 for each copyrighted work that it pirated. The company downloaded unauthorized copies of books in early efforts to gather training data for its AI tools. AI Summary and…

Cloud Blog: ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690)

Sep 3, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability/ Source: Cloud Blog Title: ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690) Feedly Summary: Written by: Rommel Joven, Josh Fleischer, Joseph Sciuto, Andi Slok, Choon Kiat Ng In a recent investigation, Mandiant Threat Defense discovered an active ViewState deserialization attack affecting Sitecore deployments leveraging sample machine keys that had been exposed in…

The Register: Zscaler latest victim of Salesloft Drift attacks, customer data exposed

Sep 2, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/09/02/zscaler_customer_data_drift_compromise/ Source: The Register Title: Zscaler latest victim of Salesloft Drift attacks, customer data exposed Feedly Summary: Joins Google, Palo Alto Networks in the ever-growing supply chain compromise Zscaler is the latest company to disclose some of its customers’ data was exposed in the recent spate of Salesloft Drift attacks affecting Salesforce databases.……

The Register: In the rush to adopt hot new tech, security is often forgotten. AI is no exception

Sep 2, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/09/02/exposed_ollama_servers_insecure_research/ Source: The Register Title: In the rush to adopt hot new tech, security is often forgotten. AI is no exception Feedly Summary: Cisco finds hundreds of Ollama servers open to unauthorized access, creating various nasty risks Cisco’s Talos security research team has found over 1,100 Ollama servers exposed to the public internet,…

The Register: Researcher who found McDonald’s free-food hack turns her attention to Chinese restaurant robots

Aug 29, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/29/pudu_robots_hackable/ Source: The Register Title: Researcher who found McDonald’s free-food hack turns her attention to Chinese restaurant robots Feedly Summary: The admin controls were left wide open on Pudu’s robots A researcher caught the world’s leading supplier of commercial service robots using shoddy admin security that let attackers redirect the delivery machines to…

Slashdot: Defense Department Reportedly Relies On Utility Written by Russian Dev

Aug 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://tech.slashdot.org/story/25/08/27/2026245/defense-department-reportedly-relies-on-utility-written-by-russian-dev?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Defense Department Reportedly Relies On Utility Written by Russian Dev Feedly Summary: AI Summary and Description: Yes Summary: The article highlights concerns over the fast-glob utility, widely used in Node.js applications, particularly within U.S. Department of Defense systems. Maintained by a Russian developer with ties to Yandex, the lack…

The Register: The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams

Aug 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/27/storm0501_ransomware_azure_teams/ Source: The Register Title: The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams Feedly Summary: Don’t let it happen to you Storm-0501, a financially motivated cybercrime crew, recently broke into a large enterprise’s on-premises and cloud environments, ultimately exfiltrating and destroying data within the org’s Azure…

The Register: Asahi, Nikkei sue AI search outfit Perplexity for copyright infringement

Aug 26, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/26/perplexity_asahi_nikkei_lawsuits/ Source: The Register Title: Asahi, Nikkei sue AI search outfit Perplexity for copyright infringement Feedly Summary: Tokyo filing adds to mounting actions against startup AI search outfit Perplexity has been hit with yet another copyright lawsuit, this time courtesy of Japan’s Nikkei and Asahi media companies.… AI Summary and Description: Yes Summary:…

Embrace The Red: How Prompt Injection Exposes Manus’ VS Code Server to the Internet

Aug 25, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://embracethered.com/blog/posts/2025/manus-ai-kill-chain-expose-port-vs-code-server-on-internet/ Source: Embrace The Red Title: How Prompt Injection Exposes Manus’ VS Code Server to the Internet Feedly Summary: Today we will cover a powerful, easy to use, autonomous agent called Manus. Manus is developed by the Chinese startup Monica, based in Singapore. This post demonstrates an end-to-end indirect prompt injection attack leading…

Tag: caution