exfiltration – Page 6 – Experimental News Clipping Site

Embrace The Red: Security Advisory: Anthropic’s Slack MCP Server Vulnerable to Data Exfiltration

Jun 25, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/security-advisory-anthropic-slack-mcp-server-data-leakage/ Source: Embrace The Red Title: Security Advisory: Anthropic’s Slack MCP Server Vulnerable to Data Exfiltration Feedly Summary: This is a security advisory for a data leakage and exfiltration vulnerability in a popular, but now deprecated and unmaintained, Slack MCP Server from Anthropic. If you are using this MCP server, or run an…

Simon Willison’s Weblog: Cato CTRL™ Threat Research: PoC Attack Targeting Atlassian’s Model Context Protocol (MCP) Introduces New “Living off AI” Risk

Jun 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://simonwillison.net/2025/Jun/19/atlassian-prompt-injection-mcp/ Source: Simon Willison’s Weblog Title: Cato CTRL™ Threat Research: PoC Attack Targeting Atlassian’s Model Context Protocol (MCP) Introduces New “Living off AI” Risk Feedly Summary: Cato CTRL™ Threat Research: PoC Attack Targeting Atlassian’s Model Context Protocol (MCP) Introduces New “Living off AI” Risk Stop me if you’ve heard this one before: A…

The Register: Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware

Jun 19, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/06/19/sneaky_serpentinecloud_slithers_through_cloudflare/ Source: The Register Title: Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware Feedly Summary: Phishing, Python and RATs, oh my A sneaky malware campaign slithers through Cloudflare tunnel subdomains to execute in-memory malicious code and give unknown attackers long-term access to pwned machines.… AI Summary and Description: Yes…

Cloud Blog: How Google Cloud is securing open-source credentials at scale

Jun 16, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/products/identity-security/securing-open-source-credentials-at-scale/ Source: Cloud Blog Title: How Google Cloud is securing open-source credentials at scale Feedly Summary: Credentials are an essential part of modern software development and deployment, granting bearers privileged access to systems, applications, and data. However, credential-related vulnerabilities remain the predominant entry point exploited by threat actors in the cloud. Stolen credentials…

Simon Willison’s Weblog: The lethal trifecta for AI agents: private data, untrusted content, and external communication

Jun 16, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: The lethal trifecta for AI agents: private data, untrusted content, and external communication Feedly Summary: If you are a user of LLM systems that use tools (you can call them “AI agents" if you like) it is critically important that you understand the risk of combining tools…

Simon Willison’s Weblog: An Introduction to Google’s Approach to AI Agent Security

Jun 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://simonwillison.net/2025/Jun/15/ai-agent-security/#atom-everything Source: Simon Willison’s Weblog Title: An Introduction to Google’s Approach to AI Agent Security Feedly Summary: Here’s another new paper on AI agent security: An Introduction to Google’s Approach to AI Agent Security, by Santiago Díaz, Christoph Kern, and Kara Olive. (I wrote about a different recent paper, Design Patterns for Securing…

Simon Willison’s Weblog: Design Patterns for Securing LLM Agents against Prompt Injections

Jun 13, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://simonwillison.net/2025/Jun/13/prompt-injection-design-patterns/#atom-everything Source: Simon Willison’s Weblog Title: Design Patterns for Securing LLM Agents against Prompt Injections Feedly Summary: This a new paper by 11 authors from organizations including IBM, Invariant Labs, ETH Zurich, Google and Microsoft is an excellent addition to the literature on prompt injection and LLM security. In this work, we describe…

CSA: DNS Posture Management: Close DNS Security Gaps

Jun 12, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://checkred.com/resources/blog/dns-posture-management-dnspm-closing-the-blind-spot-in-enterprise-dns-security/ Source: CSA Title: DNS Posture Management: Close DNS Security Gaps Feedly Summary: AI Summary and Description: Yes **Summary:** The text emphasizes the underappreciation of the Domain Name System (DNS) in cloud security strategies, identifying it as a significant vulnerability within multi-cloud environments. It introduces DNS Posture Management (DNSPM) as a necessary practice…

Simon Willison’s Weblog: Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot

Jun 11, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://simonwillison.net/2025/Jun/11/echoleak/ Source: Simon Willison’s Weblog Title: Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot Feedly Summary: Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot Aim Labs reported CVE-2025-32711 against Microsoft 365 Copilot back in January, and the fix is…

Simon Willison’s Weblog: The last year six months in LLMs, illustrated by pelicans on bicycles

Jun 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://simonwillison.net/2025/Jun/6/six-months-in-llms/#atom-everything Source: Simon Willison’s Weblog Title: The last year six months in LLMs, illustrated by pelicans on bicycles Feedly Summary: I presented an invited keynote at the AI Engineer World’s Fair in San Francisco this week. This is my third time speaking at the event – here’s my talks from October 2023 and…

Tag: exfiltration