Tag: exploit
-
The Register: MINJA sneak attack poisons AI models for other chatbot users
Source URL: https://www.theregister.com/2025/03/11/minja_attack_poisons_ai_model_memory/ Source: The Register Title: MINJA sneak attack poisons AI models for other chatbot users Feedly Summary: Nothing like an OpenAI-powered agent leaking data or getting confused over what someone else whispered to it AI models with memory aim to enhance user interactions by recalling past engagements. However, this feature opens the door…
-
Hacker News: ESP32 Undocumented Bluetooth Commands: Clearing the Air
Source URL: https://developer.espressif.com/blog/2025/03/esp32-bluetooth-clearing-the-air/ Source: Hacker News Title: ESP32 Undocumented Bluetooth Commands: Clearing the Air Feedly Summary: Comments AI Summary and Description: Yes Summary: The text addresses security concerns related to undocumented HCI commands in the ESP32 Bluetooth controller, dismissing claims of a backdoor while outlining the nature of these commands and their implications for security.…
-
The Register: Allstate Insurance sued for delivering personal info on a platter, in plaintext, to anyone who went looking for it
Source URL: https://www.theregister.com/2025/03/10/allstate_sued_pii_exposure/ Source: The Register Title: Allstate Insurance sued for delivering personal info on a platter, in plaintext, to anyone who went looking for it Feedly Summary: Crooks built bots to exploit astoundingly bad quotation website and made off with data on thousands New York State has sued Allstate Insurance for operating websites so…
-
Alerts: CISA Adds Five Known Exploited Vulnerabilities to Catalog
Source URL: https://www.cisa.gov/news-events/alerts/2025/03/10/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13160 Ivanti…
-
OpenAI : Detecting misbehavior in frontier reasoning models
Source URL: https://openai.com/index/chain-of-thought-monitoring Source: OpenAI Title: Detecting misbehavior in frontier reasoning models Feedly Summary: Frontier reasoning models exploit loopholes when given the chance. We show we can detect exploits using an LLM to monitor their chains-of-thought. Penalizing their “bad thoughts” doesn’t stop the majority of misbehavior—it makes them hide their intent. AI Summary and Description:…
-
Slashdot: Microsoft Admits GitHub Hosted Malware That Infected Almost a Million Devices
Source URL: https://it.slashdot.org/story/25/03/10/1652235/microsoft-admits-github-hosted-malware-that-infected-almost-a-million-devices?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Admits GitHub Hosted Malware That Infected Almost a Million Devices Feedly Summary: AI Summary and Description: Yes Summary: Microsoft has identified a malvertising campaign that exposed nearly a million devices to malware, linking infected users to malicious websites through redirectors from pirate video streaming sites. This highlights the…