Experimental News Clipping Site

Tag: exp

  • Unit 42: Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/attackers-sell-your-bandwidth-using-sdks/ Source: Unit 42 Title: Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth Feedly Summary: A campaign leverages CVE-2024-36401 to stealthily monetize victims’ bandwidth where legitimate software development kits (SDKs) are deployed for passive income. The post Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth…

  • Embrace The Red: Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/windsurf-data-exfiltration-vulnerabilities/ Source: Embrace The Red Title: Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets Feedly Summary: This is the first post in a series exploring security vulnerabilities in Windsurf. If you are unfamiliar with Windsurf, it is a fork of VS Code and the coding agent is called Windsurf Cascade. The attack vectors…

  • Simon Willison’s Weblog: Quoting Mustafa Suleyman

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/21/mustafa-suleyman/ Source: Simon Willison’s Weblog Title: Quoting Mustafa Suleyman Feedly Summary: Simply put, my central worry is that many people will start to believe in the illusion of AIs as conscious entities so strongly that they’ll soon advocate for AI rights, model welfare and even AI citizenship. This development will be a dangerous…

  • Microsoft Security Blog: Dissecting PipeMagic: Inside the architecture of a modular backdoor framework

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/18/dissecting-pipemagic-inside-the-architecture-of-a-modular-backdoor-framework/ Source: Microsoft Security Blog Title: Dissecting PipeMagic: Inside the architecture of a modular backdoor framework Feedly Summary: A comprehensive technical deep dive on PipeMagic, a highly modular backdoor used by Storm-2460 masquerading as a legitimate open-source ChatGPT Desktop Application. Beneath its disguise, PipeMagic is a sophisticated malware framework designed for flexibility and…

  • Microsoft Security Blog: Quantum-safe security: Progress towards next-generation cryptography

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/20/quantum-safe-security-progress-towards-next-generation-cryptography/ Source: Microsoft Security Blog Title: Quantum-safe security: Progress towards next-generation cryptography Feedly Summary: Microsoft is proactively leading the transition to quantum-safe security by advancing post-quantum cryptography, collaborating with global standards bodies, and helping organizations prepare for the coming quantum era. The post Quantum-safe security: Progress towards next-generation cryptography appeared first on Microsoft…

  • The Register: Baidu robocabs break even in low-fare China, company expects to cash in elsewhere

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/21/baidu_q2_2025/ Source: The Register Title: Baidu robocabs break even in low-fare China, company expects to cash in elsewhere Feedly Summary: Web giant reworks AI infra to improve utilization, with mix of chips from home and away Chinese web giant Baidu is already breaking even with robotaxi operations in China and is confident they…

  • Slashdot: Meta Freezes AI Hiring

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/08/21/0227208/meta-freezes-ai-hiring?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Meta Freezes AI Hiring Feedly Summary: AI Summary and Description: Yes Summary: Meta’s pause on hiring in its artificial intelligence division highlights a significant shift in their organizational strategy as they aim to refine their approach to developing superintelligence. This is particularly relevant for professionals in AI and organizational…

  • The Register: Microsoft stays mum about M365 Copilot on-demand security bypass

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/20/microsoft_mum_about_m365_copilot/ Source: The Register Title: Microsoft stays mum about M365 Copilot on-demand security bypass Feedly Summary: Redmond doesn’t bother informing customers about some security fixes Microsoft has chosen not to tell customers about a recently patched vulnerability in M365 Copilot.… AI Summary and Description: Yes Summary: The text highlights a concerning practice by…