Experimental News Clipping Site

Tag: DNS

  • Embrace The Red: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-data-exfil-via-dns/ Source: Embrace The Red Title: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection Feedly Summary: The next three posts will cover high severity vulnerabilities in the Amazon Q Developer VS Code Extension (Amazon Q), which is a very popular coding agent, with over 1 million downloads. It is vulnerable to…

  • Cloud Blog: Designing a multi-tenant GKE platform for Yahoo Mail’s migration journey

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/containers-kubernetes/understanding-yahoo-mails-multi-tenant-gke-platform-design/ Source: Cloud Blog Title: Designing a multi-tenant GKE platform for Yahoo Mail’s migration journey Feedly Summary: Yahoo is in the midst of a multi-year journey to migrate its renowned Yahoo Mail application onto Google Cloud. With more than 100 services and middleware components in the application, Yahoo Mail is primarily taking a…

  • Embrace The Red: Claude Code: Data Exfiltration with DNS Requests

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/claude-code-exfiltration-via-dns-requests/ Source: Embrace The Red Title: Claude Code: Data Exfiltration with DNS Requests Feedly Summary: Today we cover Claude Code and a high severity vulnerability that Anthropic fixed in early June. The vulnerability allowed an attacker to hijack Claude Code via indirect prompt injection and leak sensitive information from the developer’s machine, e.g.…

  • Simon Willison’s Weblog: ChatGPT agent’s user-agent

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/4/chatgpt-agents-user-agent/#atom-everything Source: Simon Willison’s Weblog Title: ChatGPT agent’s user-agent Feedly Summary: I was exploring how ChatGPT agent works today. I learned some interesting things about how it exposes its identity through HTTP headers, then made a huge blunder in thinking it was leaking its URLs to Bingbot and Yandex… but it turned out…

  • Simon Willison’s Weblog: ChatGPT agent triggers crawls from Bingbot and Yandex

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/4/chatgpt-agents-agent/#atom-everything Source: Simon Willison’s Weblog Title: ChatGPT agent triggers crawls from Bingbot and Yandex Feedly Summary: ChatGPT agent is the recently released (and confusingly named) ChatGPT feature that provides browser automation combined with terminal access as a feature of ChatGPT – replacing their previous Operator research preview which is scheduled for deprecation on…

  • The Cloudflare Blog: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME)

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/vulnerability-disclosure-on-ssl-for-saas-v1-managed-cname/ Source: The Cloudflare Blog Title: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME) Feedly Summary: An upcoming vulnerability disclosure in Cloudflare’s SSL for SaaSv1 is detailed, explaining the steps we’ve taken towards deprecation. AI Summary and Description: Yes Summary: The text discusses a vulnerability discovered in Cloudflare’s SSL for SaaS v1…

  • Slashdot: Cisco Donates the AGNTCY Project to the Linux Foundation

    —

    by

    Kurt Seifried
    in

    Source URL: https://linux.slashdot.org/story/25/07/29/2053245/cisco-donates-the-agntcy-project-to-the-linux-foundation?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Cisco Donates the AGNTCY Project to the Linux Foundation Feedly Summary: AI Summary and Description: Yes Summary: Cisco’s donation of its AGNTCY initiative to the Linux Foundation seeks to establish an open-standard “Internet of Agents” to enhance interoperability among AI agents from different vendors. This framework addresses several key…

  • CSA: Homoglyph Attacks & Domain Squatting

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/homoglyph-attacks-domain-squatting-the-hidden-risk-to-your-brand Source: CSA Title: Homoglyph Attacks & Domain Squatting Feedly Summary: AI Summary and Description: Yes Summary: The text highlights the escalating threat posed by homoglyph-based domain squatting, emphasizing its potential impact on brand trust and cloud security. It underscores the need for proactive DNS posture management to detect and mitigate these risks,…