Tag: Exploitation

Source URL: https://www.theregister.com/2025/08/04/sonicwall_investigates_cyber_incidents/ Source: The Register Title: SonicWall investigates ‘cyber incidents,’ including ransomware targeting suspected 0-day Feedly Summary: Bypassing MFA and deploying ransomware…sounds like something that rhymes with ‘schmero-day’ SonicWall on Monday confirmed that it’s investigating a rash of ransomware activity targeting its firewall devices, following multiple reports of a zero-day bug under active exploit…

Embrace The Red: Turning ChatGPT Codex Into A ZombAI Agent

Aug 2, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/chatgpt-codex-remote-control-zombai/ Source: Embrace The Red Title: Turning ChatGPT Codex Into A ZombAI Agent Feedly Summary: Today we cover ChatGPT Codex as part of the Month of AI Bugs series. ChatGPT Codex is a cloud-based software engineering agent that answers codebase questions, executes code, and drafts pull requests. In particular, this post will demonstrate…

Embrace The Red: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection

Aug 1, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/chatgpt-chat-history-data-exfiltration/ Source: Embrace The Red Title: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection Feedly Summary: In this post we demonstrate how a bypass in OpenAI’s “safe URL” rendering feature allows ChatGPT to send personal information to a third-party server. This can be exploited by an adversary via a prompt injection…

Anton on Security – Medium: Google Cloud Security Threat Horizons Report #12 Is Out!

—

by

Source URL: https://medium.com/anton-on-security/google-cloud-security-threat-horizons-report-12-is-out-6e84e700467f?source=rss—-8e8c3ed26c4c—4 Source: Anton on Security – Medium Title: Google Cloud Security Threat Horizons Report #12 Is Out! Feedly Summary: AI Summary and Description: Yes Summary: The text discusses insights from Google Cloud’s Threat Horizons Report #12, focusing on key security vulnerabilities in cloud environments. It highlights the persistent exploitation of issues like credential…

Microsoft Security Blog: Frozen in transit: Secret Blizzard’s AiTM campaign against diplomats

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2025/07/31/frozen-in-transit-secret-blizzards-aitm-campaign-against-diplomats/ Source: Microsoft Security Blog Title: Frozen in transit: Secret Blizzard’s AiTM campaign against diplomats Feedly Summary: Microsoft Threat Intelligence has uncovered a cyberespionage campaign by the Russian state actor we track as Secret Blizzard that has been ongoing since at least 2024, targeting embassies in Moscow using an adversary-in-the-middle (AiTM) position to…

Cloud Blog: A deep dive into code reviews with Gemini Code Assist in GitHub

—

by

Source URL: https://cloud.google.com/blog/products/ai-machine-learning/gemini-code-assist-and-github-ai-code-reviews/ Source: Cloud Blog Title: A deep dive into code reviews with Gemini Code Assist in GitHub Feedly Summary: Imagine a code review process that doesn’t slow you down. Instead of a queue of pending pull requests, you have an intelligent assistant that provides a near-instant, comprehensive summary of every change. It flags…

Cisco Talos Blog: IR Trends Q2 2025: Phishing attacks persist as actors leverage compromised valid accounts to enhance legitimacy

—

by

Source URL: https://blog.talosintelligence.com/ir-trends-q2-2025/ Source: Cisco Talos Blog Title: IR Trends Q2 2025: Phishing attacks persist as actors leverage compromised valid accounts to enhance legitimacy Feedly Summary: Phishing remained the top initial access method in Q2 2025, while ransomware incidents see the emergence of new Qilin tactics. AI Summary and Description: Yes **Summary:** The text provides…

Cisco Talos Blog: Using LLMs as a reverse engineering sidekick

—

by

Source URL: https://blog.talosintelligence.com/using-llm-as-a-reverse-engineering-sidekick/ Source: Cisco Talos Blog Title: Using LLMs as a reverse engineering sidekick Feedly Summary: LLMs may serve as powerful assistants to malware analysts to streamline workflows, enhance efficiency, and provide actionable insights during malware analysis. AI Summary and Description: Yes **Summary:** The text provides an in-depth analysis of using Large Language Models…

Cloud Blog: Cloud CISO Perspectives: Going beyond 2FA to address fast-rising, emerging threats

Jul 30, 2025

—

by