Experimental News Clipping Site

Tag: Exploitation

  • Simon Willison’s Weblog: Supabase MCP can leak your entire SQL database

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: Supabase MCP can leak your entire SQL database Feedly Summary: Supabase MCP can leak your entire SQL database Here’s yet another example of a lethal trifecta attack, where an LLM system combines access to private data, exposure to potentially malicious instructions and a mechanism to communicate data…

  • Slashdot: Two Sudo Vulnerabilities Discovered and Patched

    —

    by

    Kurt Seifried
    in

    Source URL: https://linux.slashdot.org/story/25/07/05/0323220/two-sudo-vulnerabilities-discovered-and-patched?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Two Sudo Vulnerabilities Discovered and Patched Feedly Summary: AI Summary and Description: Yes Summary: The text discusses recently disclosed security vulnerabilities in Sudo that allow local attackers to escalate their privileges. Researchers have identified two critical flaws, CVE-2025-32462 and CVE-2025-32463, which could potentially expose systems to security risks and…

  • CSA: What We Can Learn from the 2024 CrowdStrike Outage

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/what-we-can-learn-from-the-2024-crowdstrike-outage Source: CSA Title: What We Can Learn from the 2024 CrowdStrike Outage Feedly Summary: AI Summary and Description: Yes **Summary:** The analysis of the CrowdStrike outage in July 2024 highlights significant vulnerabilities within centralized cloud security solutions and their ripple effects on numerous organizations. The incident underscores the critical need for thorough…

  • CSA: What MITRE ATT&CK v17 Means for ESXi Security

    —

    by

    Kurt Seifried
    in

    Source URL: https://valicyber.com/resources/mitre-attck-v17-esxi/ Source: CSA Title: What MITRE ATT&CK v17 Means for ESXi Security Feedly Summary: AI Summary and Description: Yes Summary: The article discusses the introduction of the ESXi matrix in MITRE ATT&CK v17, emphasizing its significance for securing hypervisors as critical attack surfaces. It identifies high-risk TTPs (Tactics, Techniques, and Procedures) specific to…

  • The Register: ChatGPT creates phisher’s paradise by recommending the wrong URLs for major companies

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/03/ai_phishing_websites/ Source: The Register Title: ChatGPT creates phisher’s paradise by recommending the wrong URLs for major companies Feedly Summary: Crims have cottoned on to a new way to lead you astray AI-powered chatbots often deliver incorrect information when asked to name the address for major companies’ websites, and threat intelligence business Netcraft thinks…

  • The Register: CISA warns the Signal clone used by natsec staffers is being attacked, so patch now

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/02/cisa_telemessage_patch/ Source: The Register Title: CISA warns the Signal clone used by natsec staffers is being attacked, so patch now Feedly Summary: Two flaws in TeleMessage are ‘frequent attack vectors for malicious cyber actors’ The US security watchdog CISA has warned that malicious actors are actively exploiting two flaws in the Signal clone…

  • Cisco Talos Blog: PDFs: Portable documents, or perfect deliveries for phish?

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/pdfs-portable-documents-or-perfect-deliveries-for-phish/ Source: Cisco Talos Blog Title: PDFs: Portable documents, or perfect deliveries for phish? Feedly Summary: A popular social engineering technique returns: callback phishing, or TOAD attacks, which leverage PDFs, VoIP anonymity and even QR code tricks. AI Summary and Description: Yes Summary: Cisco’s update to its brand impersonation detection engine enhances email…

  • Slashdot: Brother Printer Bug In 689 Models Exposes Millions To Hacking

    —

    by

    Kurt Seifried
    in

    Source URL: https://hardware.slashdot.org/story/25/06/26/2351234/brother-printer-bug-in-689-models-exposes-millions-to-hacking?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Brother Printer Bug In 689 Models Exposes Millions To Hacking Feedly Summary: AI Summary and Description: Yes Summary: Recent discoveries by Rapid7 have identified significant vulnerabilities in hundreds of printer models, particularly from Brother, exposing millions of devices to potential attacks. The most critical flaw allows attackers to bypass…