Experimental News Clipping Site

Tag: critical risk

  • Simon Willison’s Weblog: Screaming in the Cloud: AI’s Security Crisis: Why Your Assistant Might Betray You

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/13/screaming-in-the-cloud/ Source: Simon Willison’s Weblog Title: Screaming in the Cloud: AI’s Security Crisis: Why Your Assistant Might Betray You Feedly Summary: Screaming in the Cloud: AI’s Security Crisis: Why Your Assistant Might Betray You I recorded this podcast conversation with Corey Quinn a few weeks ago: On this episode of Screaming in the…

  • The Register: Russia’s RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/11/russias_romcom_among_those_exploiting/ Source: The Register Title: Russia’s RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks Feedly Summary: A few weeks earlier ‘zeroplayer’ advertised an $80K WinRAR 0-day exploit Russia-linked attackers found and exploited a high-severity WinRAR vulnerability before the maintainers of the Windows file archiver issued a fix.… AI Summary and Description:…

  • Cloud Blog: Boosting defenders with AI: What’s coming at Security Summit 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/identity-security/boosting-defenders-with-ai-whats-coming-at-security-summit-2025/ Source: Cloud Blog Title: Boosting defenders with AI: What’s coming at Security Summit 2025 Feedly Summary: While AI can help empower defenders, it can also create new security challenges. Those two critical, interconnected themes are driving our announcements and presentations for this year’s Google Cloud Security Summit.Join us live for Security Summit…

  • Krebs on Security: Who Got Arrested in the Raid on the XSS Crime Forum?

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/08/who-got-arrested-in-the-raid-on-the-xss-crime-forum/ Source: Krebs on Security Title: Who Got Arrested in the Raid on the XSS Crime Forum? Feedly Summary: On July 22, 2025, the European police agency Europol said a long-running investigation led by the French Police resulted in the arrest of a 38-year-old administrator of XSS, a Russian-language cybercrime forum with more than…

  • Schneier on Security: Microsoft SharePoint Zero-Day

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/07/microsoft-sharepoint-zero-day.html Source: Schneier on Security Title: Microsoft SharePoint Zero-Day Feedly Summary: Chinese hackers are exploiting a high-severity vulnerability in Microsoft SharePoint to steal data worldwide: The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated remote access to SharePoint Servers exposed to the Internet.…

  • The Register: Uncle Sam wants you – to use memory-safe programming languages

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/27/cisa_nsa_call_formemory_safe_languages/ Source: The Register Title: Uncle Sam wants you – to use memory-safe programming languages Feedly Summary: ‘Memory vulnerabilities pose serious risks to national security and critical infrastructure,’ say CISA and NSA The US Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) this week published guidance urging software developers…

  • The Register: Anthropic won’t fix a bug in its SQLite MCP server

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/25/anthropic_sql_injection_flaw_unfixed/ Source: The Register Title: Anthropic won’t fix a bug in its SQLite MCP server Feedly Summary: Fork that – 5k+ times Anthropic says it won’t fix an SQL injection vulnerability in its SQLite Model Context Protocol (MCP) server that a researcher says could be used to hijack a support bot and prompt…