Experimental News Clipping Site

Tag: injection

  • Hacker News: Malicious extensions circumvent Google’s remote code ban

    —

    by

    Kurt Seifried
    in

    Source URL: https://palant.info/2025/01/20/malicious-extensions-circumvent-googles-remote-code-ban/ Source: Hacker News Title: Malicious extensions circumvent Google’s remote code ban Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses security vulnerabilities related to malicious browser extensions in the Chrome Web Store, focusing on how they can execute remote code and compromise user privacy. It critiques Google’s policies regarding…

  • The Register: OpenAI’s ChatGPT crawler can be tricked into DDoSing sites, answering your queries

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/19/openais_chatgpt_crawler_vulnerability/ Source: The Register Title: OpenAI’s ChatGPT crawler can be tricked into DDoSing sites, answering your queries Feedly Summary: The S in LLM stands for Security OpenAI’s ChatGPT crawler appears to be willing to initiate distributed denial of service (DDoS) attacks on arbitrary websites, a reported vulnerability the tech giant has yet to…

  • Hacker News: Laser Fault Injection on a Budget: RP2350 Edition

    —

    by

    Kurt Seifried
    in

    Source URL: https://courk.cc/rp2350-challenge-laser Source: Hacker News Title: Laser Fault Injection on a Budget: RP2350 Edition Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the development of a custom “Laser Fault Injection Platform” aimed at exploiting the security features of the RP2350 microcontroller, particularly its Secure Boot mechanism. This exploration reveals potential…

  • Simon Willison’s Weblog: Lessons From Red Teaming 100 Generative AI Products

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/18/lessons-from-red-teaming/ Source: Simon Willison’s Weblog Title: Lessons From Red Teaming 100 Generative AI Products Feedly Summary: Lessons From Red Teaming 100 Generative AI Products New paper from Microsoft describing their top eight lessons learned red teaming (deliberately seeking security vulnerabilities in) 100 different generative AI models and products over the past few years.…

  • CSA: AI and Compliance for the Mid-Market

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.scrut.io/post/ai-and-compliance-for-the-mid-market Source: CSA Title: AI and Compliance for the Mid-Market Feedly Summary: AI Summary and Description: Yes **Summary:** The text emphasizes the urgent need for small and medium-sized businesses (SMBs) to adopt AI responsibly, given the potential cybersecurity vulnerabilities and evolving regulatory landscape associated with AI technologies. It outlines practical guidance and standards…

  • CSA: LLM Dragons: Why DSPM is the Key to AI Security

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/training-your-llm-dragons-why-dspm-is-the-key-to-ai-security Source: CSA Title: LLM Dragons: Why DSPM is the Key to AI Security Feedly Summary: AI Summary and Description: Yes Summary: The text emphasizes the security risks associated with AI implementations, particularly custom large language models (LLMs) and Microsoft Copilot. It outlines key threats such as data leakage and compliance failures and…

  • The Register: Just as your LLM once again goes off the rails, Cisco, Nvidia are at the door smiling

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/17/nvidia_cisco_ai_guardrails_security/ Source: The Register Title: Just as your LLM once again goes off the rails, Cisco, Nvidia are at the door smiling Feedly Summary: Some of you have apparently already botched chatbots or allowed ‘shadow AI’ to creep in Cisco and Nvidia have both recognized that as useful as today’s AI may be,…

  • Cisco Talos Blog: Find the helpers

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/find-the-helpers/ Source: Cisco Talos Blog Title: Find the helpers Feedly Summary: Bill discusses how to find ‘the helpers’ and the importance of knowledge sharing. Plus, there’s a lot to talk about in our latest vulnerability roundup. AI Summary and Description: Yes Summary: This edition of the Threat Source newsletter emphasizes the importance of…

  • Alerts: CISA Adds One Known Exploited Vulnerability to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/16/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks…

  • The Register: Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/16/raspberry_pi_awards_prizes_for/ Source: The Register Title: Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge Feedly Summary: Power-induced glitches, lasers, and electromagnetic fields are all tools of the trade Raspberry Pi has given out prizes for extracting a secret value from the one-time-programmable (OTP) memory of the Raspberry Pi RP2350 microcontroller…