Experimental News Clipping Site

Tag: exploit chain

  • Simon Willison’s Weblog: Cross-Agent Privilege Escalation: When Agents Free Each Other

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Sep/24/cross-agent-privilege-escalation/ Source: Simon Willison’s Weblog Title: Cross-Agent Privilege Escalation: When Agents Free Each Other Feedly Summary: Cross-Agent Privilege Escalation: When Agents Free Each Other Here’s a clever new form of AI exploit from Johann Rehberger, who has coined the term Cross-Agent Privilege Escalation to describe an attack where multiple coding agents – GitHub…

  • Slashdot: Apple Claims ‘Most Significant Upgrade to Memory Safety’ in OS History

    —

    by

    Kurt Seifried
    in

    Source URL: https://apple.slashdot.org/story/25/09/14/228211/apple-claims-most-significant-upgrade-to-memory-safety-in-os-history?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Apple Claims ‘Most Significant Upgrade to Memory Safety’ in OS History Feedly Summary: AI Summary and Description: Yes Summary: Apple has introduced a groundbreaking security feature called Memory Integrity Enforcement (MIE) in its latest devices, which significantly enhances memory safety and aims to defend against sophisticated spyware attacks. This…

  • Slashdot: Did a Vendor’s Leak Help Attackers Exploit Microsoft’s SharePoint Servers?

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/07/27/0337218/did-a-vendors-leak-help-attackers-exploit-microsofts-sharepoint-servers?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Did a Vendor’s Leak Help Attackers Exploit Microsoft’s SharePoint Servers? Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a serious security concern regarding zero-day exploits targeting Microsoft’s SharePoint servers, emphasizing potential leaks of vulnerability information and the impact of generative AI tools like Google Gemini in…

  • The Cloudflare Blog: Cloudflare protects against critical SharePoint vulnerability, CVE-2025-53770

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/cloudflare-protects-against-critical-sharepoint-vulnerability-cve-2025-53770/ Source: The Cloudflare Blog Title: Cloudflare protects against critical SharePoint vulnerability, CVE-2025-53770 Feedly Summary: Microsoft disclosed two critical vulnerabilities, CVE-2025-53771 and CVE-2025-53770, that are exploited to attack SharePoint servers. AI Summary and Description: Yes **Summary:** The text discusses the critical CVE-2025-53770 vulnerability in Microsoft SharePoint that allows remote code execution and highlights…

  • Krebs on Security: Microsoft Fix Targets Attacks on SharePoint Zero-Day

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/07/microsoft-fix-targets-attacks-on-sharepoint-zero-day/ Source: Krebs on Security Title: Microsoft Fix Targets Attacks on SharePoint Zero-Day Feedly Summary: On Sunday, July 20, Microsoft Corp. issued an emergency security update for a vulnerability in SharePoint Server that is actively being exploited to compromise vulnerable organizations. The patch comes amid reports that malicious hackers have used the Sharepoint…

  • The Register: Sitecore CMS flaw let attackers brute-force ‘b’ for backdoor

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/17/sitecore_rce_vulnerabilities/ Source: The Register Title: Sitecore CMS flaw let attackers brute-force ‘b’ for backdoor Feedly Summary: Hardcoded passwords and path traversals keeping bug hunters in work Security researchers have issued a warning about a pre-authentication exploit chain affecting a CMS used by some of the biggest companies in the world.… AI Summary and…

  • Embrace The Red: Model Context Protocol – New Sneaky Exploit, Risks and Mitigations

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/model-context-protocol-security-risks-and-exploits/ Source: Embrace The Red Title: Model Context Protocol – New Sneaky Exploit, Risks and Mitigations Feedly Summary: The Model Context Protocol (MCP) is a protocol definition for how LLM apps/agents can leverage external tools. I have been calling it Model Control Protocol at times, because due to prompt injection, MCP tool servers…

  • Hacker News: Blasting Past WebP – An analysis of the NSO BLASTPASS iMessage exploit

    —

    by

    Kurt Seifried
    in

    Source URL: https://googleprojectzero.blogspot.com/2025/03/blasting-past-webp.html Source: Hacker News Title: Blasting Past WebP – An analysis of the NSO BLASTPASS iMessage exploit Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text provides an in-depth analysis of the NSO Group’s zero-click exploit, known as BLASTPASS, which targets vulnerabilities in Apple’s iOS, specifically focusing on how manipulative content…