Experimental News Clipping Site

Tag: cyber

  • Embrace The Red: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/openhands-the-lethal-trifecta-strikes-again/ Source: Embrace The Red Title: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets Feedly Summary: Another day, another AI data exfiltration exploit. Today we talk about OpenHands, formerly referred to as OpenDevin initially. It’s created by All-Hands AI. OpenHands renders images in chat, which enables zero-click data exfiltration during prompt injection…

  • Microsoft Security Blog: Announcing public preview: Phishing triage agent in Microsoft Defender

    —

    by

    Kurt Seifried
    in

    Source URL: https://techcommunity.microsoft.com/blog/microsoftthreatprotectionblog/announcing-public-preview-phishing-triage-agent-in-microsoft-defender/4438301 Source: Microsoft Security Blog Title: Announcing public preview: Phishing triage agent in Microsoft Defender Feedly Summary: The Phishing Triage Agent in Microsoft Defender is now available in Public Preview. It tackles one of the most repetitive tasks in the SOC: handling reports of user-submitted phish. The post Announcing public preview: Phishing triage…

  • The Register: CISA releases malware analysis for Sharepoint Server attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/07/cisa_releases_malware_analysis/ Source: The Register Title: CISA releases malware analysis for Sharepoint Server attack Feedly Summary: Indications of compromise and Sigma rules report for your security scanners amid ongoing ‘ToolShell’ blitz CISA has published a malware analysis report with compromise indicators and Sigma rules for “ToolShell" attacks targeting specific Microsoft SharePoint Server versions.… AI…

  • Cisco Security Blog: Improving Cloud-VPN Resiliency to DoS Attacks With IKE Throttling

    —

    by

    Kurt Seifried
    in

    Source URL: https://blogs.cisco.com/security/improving-cloud-vpn-resiliency-to-dos-attacks-with-ike-throttling Source: Cisco Security Blog Title: Improving Cloud-VPN Resiliency to DoS Attacks With IKE Throttling Feedly Summary: Explore a network-layer throttling mechanism to improve the resiliency of Cloud VPNs IKE servers, which are typically subject to IKE flood attacks. AI Summary and Description: Yes Summary: The text addresses a network-layer throttling mechanism aimed…

  • Anchore: Meeting 2025’s SBOM Compliance Deadlines: A Practical Implementation Guide

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/meeting-2025s-sbom-compliance-deadlines-a-practical-implementation-guide/ Source: Anchore Title: Meeting 2025’s SBOM Compliance Deadlines: A Practical Implementation Guide Feedly Summary: 2025 has become the year of SBOM compliance deadlines. March 31st marked PCI DSS 4.0’s enforcement date, requiring payment processors to maintain comprehensive inventories of all software components. Meanwhile, the EU’s Cyber Resilience Act takes full effect in…

  • Schneier on Security: China Accuses Nvidia of Putting Backdoors into Their Chips

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/08/china-accuses-nvidia-of-putting-backdoors-into-their-chips.html Source: Schneier on Security Title: China Accuses Nvidia of Putting Backdoors into Their Chips Feedly Summary: The government of China has accused Nvidia of inserting a backdoor into their H20 chips: China’s cyber regulator on Thursday said it had held a meeting with Nvidia over what it called “serious security issues” with…

  • Slashdot: Citizen Lab Director Warns Cyber Industry About US Authoritarian Descent

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/08/06/228248/citizen-lab-director-warns-cyber-industry-about-us-authoritarian-descent?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Citizen Lab Director Warns Cyber Industry About US Authoritarian Descent Feedly Summary: AI Summary and Description: Yes Summary: The text concerns Ron Deibert, director of Citizen Lab, who is alerting the cybersecurity community to the increasing fusion of technology and authoritarianism, emphasizing the role of Big Tech in this…

  • The Register: Microsoft researchers bullish on AI security agent even though it let 74% of malware slip through

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/06/microsofts_ai_agent_malware_detecting/ Source: The Register Title: Microsoft researchers bullish on AI security agent even though it let 74% of malware slip through Feedly Summary: Project Ire promises to use LLMs to detect whether code is malicious or benign Microsoft has rolled out an autonomous AI agent that it claims can detect malware without human…

  • Microsoft Security Blog: Sharing practical guidance: Launching Microsoft Secure Future Initiative (SFI) patterns and practices

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/06/sharing-practical-guidance-launching-microsoft-secure-future-initiative-sfi-patterns-and-practices/ Source: Microsoft Security Blog Title: Sharing practical guidance: Launching Microsoft Secure Future Initiative (SFI) patterns and practices Feedly Summary: We’re excited to launch SFI patterns and practices: a new library of actionable guidance designed to help organizations implement security measures at scale. This launch marks a next step in our journey to…