Tag: data exfiltration

  • The Register: Medical monitoring machines spotted stealing patient data, users warned to pull the plug ASAP

    Source URL: https://www.theregister.com/2025/02/03/backdoored_contec_patient_monitors_leak_data/ Source: The Register Title: Medical monitoring machines spotted stealing patient data, users warned to pull the plug ASAP Feedly Summary: PLUS: MGM settles breach suits; AWS doesn’t trust you with security defaults; A new .NET backdoor; and more Infosec in brief The United States Food and Drug Administration has told medical facilities…

  • Unit 42: Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek

    Source URL: https://unit42.paloaltonetworks.com/?p=138180 Source: Unit 42 Title: Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek Feedly Summary: Evaluation of three jailbreaking techniques on DeepSeek shows risks of generating prohibited content. The post Recent Jailbreaks Demonstrate Emerging Threat to DeepSeek appeared first on Unit 42. AI Summary and Description: Yes Summary: The text outlines the research conducted…

  • The Register: Lazarus Group cloned open source projects to plant backdoors, steal credentials

    Source URL: https://www.theregister.com/2025/01/29/lazarus_groups_supply_chain_attack/ Source: The Register Title: Lazarus Group cloned open source projects to plant backdoors, steal credentials Feedly Summary: Stealing crypto is so 2024. Supply-chain attacks leading to data exfil pays off better? North Korea’s Lazarus Group compromised hundreds of victims across the globe in a massive secret-stealing supply chain attack that was ongoing…

  • Unit 42: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia

    Source URL: https://unit42.paloaltonetworks.com/?p=138128 Source: Unit 42 Title: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia Feedly Summary: A Chinese-linked espionage campaign targeted entities in South Asia using rare techniques like DNS exfiltration, with the aim to steal sensitive data. The post CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia appeared first…

  • Hacker News: Microsoft Probing If DeepSeek-Linked Group Improperly Obtained OpenAI Data

    Source URL: https://www.bloomberg.com/news/articles/2025-01-29/microsoft-probing-if-deepseek-linked-group-improperly-obtained-openai-data Source: Hacker News Title: Microsoft Probing If DeepSeek-Linked Group Improperly Obtained OpenAI Data Feedly Summary: Comments AI Summary and Description: Yes Summary: Microsoft and OpenAI are reportedly investigating a potential data exfiltration incident involving their technology linked to a Chinese AI startup, DeepSeek. This raises critical concerns about security and integrity in…