Experimental News Clipping Site

Tag: disclosure

  • The Register: As US vuln-tracking falters, EU enters with its own security bug database

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/05/13/eu_security_bug_database/ Source: The Register Title: As US vuln-tracking falters, EU enters with its own security bug database Feedly Summary: EUVD comes into play not a moment too soon The European Vulnerability Database (EUVD) is now fully operational, offering a streamlined platform to monitor critical and actively exploited security flaws amid the US struggles…

  • CSA: The OWASP Top 10 for LLMs: CSA’s Defense Playbook

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/the-owasp-top-10-for-llms-csa-s-strategic-defense-playbook Source: CSA Title: The OWASP Top 10 for LLMs: CSA’s Defense Playbook Feedly Summary: AI Summary and Description: Yes Summary: The text outlines the OWASP Top 10 vulnerabilities specific to large language models (LLMs) and provides actionable guidance from the Cloud Security Alliance (CSA) to mitigate these risks. This is crucial for…

  • Microsoft Security Blog: Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/05/01/analyzing-cve-2025-31191-a-macos-security-scoped-bookmarks-based-sandbox-escape/ Source: Microsoft Security Blog Title: Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape Feedly Summary: Microsoft uncovered a vulnerability in macOS that could allow specially crafted codes to escape the App Sandbox and run unrestricted on the system. We shared our findings with Apple and a fix was released for this vulnerability,…

  • The Register: More Ivanti attacks may be on horizon, say experts who are seeing 9x surge in endpoint scans

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/25/more_ivanti_attacks_may_be/ Source: The Register Title: More Ivanti attacks may be on horizon, say experts who are seeing 9x surge in endpoint scans Feedly Summary: GreyNoise says it is the kind of activity that typically precedes new vulnerability disclosures Ivanti VPN users should stay alert as IP scanning for the vendor’s Connect Secure and…

  • Wired: Behold the Social Security Administration’s AI Training Video

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/social-security-ai-training-video/ Source: Wired Title: Behold the Social Security Administration’s AI Training Video Feedly Summary: Social Security workers are being asked to use an AI chatbot. An animated video on how to do so failed to mention that the chatbot can’t be trusted with personally identifiable information. AI Summary and Description: Yes Summary: The…