Experimental News Clipping Site

Tag: engineering

  • Cisco Talos Blog: Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/talos-ir-trends-q4-2024/ Source: Cisco Talos Blog Title: Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike Feedly Summary: This new report from Cisco Talos Incident Response explores how threat actors increasingly deployed web shells against vulnerable web applications, and exploited vulnerable or unpatched public-facing applications to gain initial access.…

  • Simon Willison’s Weblog: On DeepSeek and Export Controls

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/29/on-deepseek-and-export-controls/ Source: Simon Willison’s Weblog Title: On DeepSeek and Export Controls Feedly Summary: On DeepSeek and Export Controls Anthropic CEO (and previously GPT-2/GPT-3 development lead at OpenAI) Dario Amodei’s essay about DeepSeek includes a lot of interesting background on the last few years of AI development. Dario was one of the authors on…

  • Simon Willison’s Weblog: How we estimate the risk from prompt injection attacks on AI systems

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/29/prompt-injection-attacks-on-ai-systems/ Source: Simon Willison’s Weblog Title: How we estimate the risk from prompt injection attacks on AI systems Feedly Summary: How we estimate the risk from prompt injection attacks on AI systems The “Agentic AI Security Team" at Google DeepMind share some details on how they are researching indirect prompt injection attacks. They…

  • Cloud Blog: Adversarial Misuse of Generative AI

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai/ Source: Cloud Blog Title: Adversarial Misuse of Generative AI Feedly Summary: Rapid advancements in artificial intelligence (AI) are unlocking new possibilities for the way we work and accelerating innovation in science, technology, and beyond. In cybersecurity, AI is poised to transform digital defense, empowering defenders and enhancing our collective security. Large language…

  • Hacker News: We got hit by an alarmingly well-prepared phish spammer

    —

    by

    Kurt Seifried
    in

    Source URL: https://utcc.utoronto.ca/~cks/space/blog/spam/WellPreparedPhishSpammer Source: Hacker News Title: We got hit by an alarmingly well-prepared phish spammer Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights a sophisticated phishing attack where attackers exploited VPN access to send spam emails after compromising a user’s credentials. This incident underscores the importance of examining security practices…

  • Hacker News: DeepSeek’s AI breakthrough bypasses industry-standard CUDA, uses PTX

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.tomshardware.com/tech-industry/artificial-intelligence/deepseeks-ai-breakthrough-bypasses-industry-standard-cuda-uses-assembly-like-ptx-programming-instead Source: Hacker News Title: DeepSeek’s AI breakthrough bypasses industry-standard CUDA, uses PTX Feedly Summary: Comments AI Summary and Description: Yes Summary: DeepSeek’s recent achievement in training a massive language model using 671 billion parameters has garnered significant attention due to its innovative optimizations and the use of Nvidia’s PTX programming. This breakthrough…

  • Cloud Blog: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/scatterbrain-unmasking-poisonplug-obfuscator/ Source: Cloud Blog Title: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator Feedly Summary: Written by: Nino Isakovic Introduction Since 2022, Google Threat Intelligence Group (GTIG) has been tracking multiple cyber espionage operations conducted by China-nexus actors utilizing POISONPLUG.SHADOW. These operations employ a custom obfuscating compiler that we refer to as “ScatterBrain," facilitating…

  • Cisco Security Blog: Black Hat Europe 2024 NOC/SOC: Security Cloud

    —

    by

    Kurt Seifried
    in

    Source URL: https://feedpress.me/link/23535/16949667/black-hat-europe-2024-noc-soc-security-cloud Source: Cisco Security Blog Title: Black Hat Europe 2024 NOC/SOC: Security Cloud Feedly Summary: Cisco is the Official Security Cloud Provider for the Black Hat Network Operations Center (NOC). We work with the other official partners to bring the hardware, software and engineers to build and secure the network, for our joint…

  • Cisco Talos Blog: New TorNet backdoor seen in widespread campaign

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/new-tornet-backdoor-campaign/ Source: Cisco Talos Blog Title: New TorNet backdoor seen in widespread campaign Feedly Summary: Cisco Talos discovered an ongoing malicious campaign operated by a financially motivated threat actor targeting users, predominantly in Poland and Germany. AI Summary and Description: Yes **Summary:** The text describes a sophisticated ongoing cyber campaign discovered by Cisco…