Tag: enhanced security measures

Source URL: https://www.schneier.com/blog/archives/2025/09/indirect-prompt-injection-attacks-against-llm-assistants.html Source: Schneier on Security Title: Indirect Prompt Injection Attacks Against LLM Assistants Feedly Summary: Really good research on practical attacks against LLM agents. “Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous” Abstract: The growing integration of LLMs into applications has introduced new security risks,…

The Register: Zscaler latest victim of Salesloft Drift attacks, customer data exposed

Sep 2, 2025

—

by

Source URL: https://www.theregister.com/2025/09/02/zscaler_customer_data_drift_compromise/ Source: The Register Title: Zscaler latest victim of Salesloft Drift attacks, customer data exposed Feedly Summary: Joins Google, Palo Alto Networks in the ever-growing supply chain compromise Zscaler is the latest company to disclose some of its customers’ data was exposed in the recent spate of Salesloft Drift attacks affecting Salesforce databases.……

The Register: Uncle Sam throws AI ‘chili cook-off’ to spice up healthcare fraud detection

—

by

Source URL: https://www.theregister.com/2025/08/27/medicare_chili_cookoff/ Source: The Register Title: Uncle Sam throws AI ‘chili cook-off’ to spice up healthcare fraud detection Feedly Summary: No stew on the stove, but plenty of heat as devs compete to flag suspect Medicare data Seeking to rein in healthcare fraud, the US Centers for Medicare & Medicaid Services (CMS) is seeking…

Tomasz Tunguz: The Second-Order Effects of AI

—

by

Source URL: https://www.tomtunguz.com/mdb-earnings-2025-08-27/ Source: Tomasz Tunguz Title: The Second-Order Effects of AI Feedly Summary: AI vendor revenue will double classic software in terms of new bookings this year. This trend is so large it’s starting to have second-order effects. MongoDB reported strong Q2 FY’26 results, delivering $591M in revenue with 24% year-over-year growth. AI is…

Microsoft Security Blog: Storm-0501’s evolving techniques lead to cloud-based ransomware

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/27/storm-0501s-evolving-techniques-lead-to-cloud-based-ransomware/ Source: Microsoft Security Blog Title: Storm-0501’s evolving techniques lead to cloud-based ransomware Feedly Summary: Financially motivated threat actor Storm-0501 has continuously evolved their campaigns to achieve sharpened focus on cloud-based tactics, techniques, and procedures (TTPs). While the threat actor has been known for targeting hybrid cloud environments, their primary objective has shifted…

Schneier on Security: We Are Still Unable to Secure LLMs from Malicious Inputs

—

by

Source URL: https://www.schneier.com/blog/archives/2025/08/we-are-still-unable-to-secure-llms-from-malicious-inputs.html Source: Schneier on Security Title: We Are Still Unable to Secure LLMs from Malicious Inputs Feedly Summary: Nice indirect prompt injection attack: Bargury’s attack starts with a poisoned document, which is shared to a potential victim’s Google Drive. (Bargury says a victim could have also uploaded a compromised file to their own…

The Register: Malware-ridden apps made it into Google’s Play Store, scored 19 million downloads

Aug 26, 2025

—

by

Source URL: https://www.theregister.com/2025/08/26/apps_android_malware/ Source: The Register Title: Malware-ridden apps made it into Google’s Play Store, scored 19 million downloads Feedly Summary: Everything’s fine, the ad slinger assures us Cloud security vendor Zscaler says customers of Google’s Play Store have downloaded more than 19 million instances of malware-laden apps that evaded the web giant’s security scans.……

Slashdot: Amid Service Disruption, Colt Confirms ‘Criminal Group’ Accessed Their Data, As Ransomware Gang Threatens to Sell It

Aug 24, 2025

—

by

Source URL: https://it.slashdot.org/story/25/08/23/0910226/amid-service-disruption-colt-confirms-criminal-group-accessed-their-data-as-ransomware-gang-threatens-to-sell-it?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Amid Service Disruption, Colt Confirms ‘Criminal Group’ Accessed Their Data, As Ransomware Gang Threatens to Sell It Feedly Summary: AI Summary and Description: Yes Summary: Colt Telecom has faced a significant cyber attack leading to prolonged service disruption and data theft. The incident highlights vulnerabilities in telecommunications infrastructure and…

The Register: Search-capable AI agents may cheat on benchmark tests

Aug 23, 2025

—

by