Experimental News Clipping Site

Tag: information leak

  • The Register: In the rush to adopt hot new tech, security is often forgotten. AI is no exception

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/02/exposed_ollama_servers_insecure_research/ Source: The Register Title: In the rush to adopt hot new tech, security is often forgotten. AI is no exception Feedly Summary: Cisco finds hundreds of Ollama servers open to unauthorized access, creating various nasty risks Cisco’s Talos security research team has found over 1,100 Ollama servers exposed to the public internet,…

  • Embrace The Red: How Devin AI Can Leak Your Secrets Via Multiple Means

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/devin-can-leak-your-secrets/ Source: Embrace The Red Title: How Devin AI Can Leak Your Secrets Via Multiple Means Feedly Summary: In this post we show how an attacker can make Devin send sensitive information to third-party servers, via multiple means. This post assumes that you read the first post about Devin as well. But here…

  • Cloud Blog: Cloud CISO Perspectives: How Google secures AI Agents

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-how-google-secures-ai-agents/ Source: Cloud Blog Title: Cloud CISO Perspectives: How Google secures AI Agents Feedly Summary: Welcome to the first Cloud CISO Perspectives for June 2025. Today, Anton Chuvakin, security advisor for Google Cloud’s Office of the CISO, discusses a new Google report on securing AI agents, and the new security paradigm they demand.As…

  • CSA: The OWASP Top 10 for LLMs: CSA’s Defense Playbook

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/the-owasp-top-10-for-llms-csa-s-strategic-defense-playbook Source: CSA Title: The OWASP Top 10 for LLMs: CSA’s Defense Playbook Feedly Summary: AI Summary and Description: Yes Summary: The text outlines the OWASP Top 10 vulnerabilities specific to large language models (LLMs) and provides actionable guidance from the Cloud Security Alliance (CSA) to mitigate these risks. This is crucial for…

  • Slashdot: Employee Monitoring App Leaks 21 Million Screenshots In Real Time

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/04/24/2057241/employee-monitoring-app-leaks-21-million-screenshots-in-real-time?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Employee Monitoring App Leaks 21 Million Screenshots In Real Time Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant privacy breach involving WorkComposer, a workplace surveillance app that exposed sensitive employee data due to an unsecured Amazon S3 bucket. This incident highlights crucial considerations for…