Experimental News Clipping Site

Tag: mitigations

  • The Register: SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac Silicon

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/29/flop_and_slap_attacks_apple_silicon/ Source: The Register Title: SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac Silicon Feedly Summary: It’s another cousin of Spectre, here to read your email, browsing history, and more Many recent Apple laptops, desktops, tablets, and phones powered by Cupertino’s homegrown Silicon processors can be exploited…

  • Slashdot: Apple Chips Can Be Hacked To Leak Secrets From Gmail, ICloud, and More

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/01/28/2140207/apple-chips-can-be-hacked-to-leak-secrets-from-gmail-icloud-and-more?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Apple Chips Can Be Hacked To Leak Secrets From Gmail, ICloud, and More Feedly Summary: AI Summary and Description: Yes Summary: The text discusses newly discovered vulnerabilities in Apple-designed chips that potentially leak sensitive data through side-channel attacks leveraging speculative execution. It highlights significant security issues that pose risks…

  • Hacker News: New Apple CPU side-channel attacks steals data from browsers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.bleepingcomputer.com/news/security/new-apple-cpu-side-channel-attack-steals-data-from-browsers/ Source: Hacker News Title: New Apple CPU side-channel attacks steals data from browsers Feedly Summary: Comments AI Summary and Description: Yes Summary: A recent disclosure by security researchers reveals critical side-channel vulnerabilities in modern Apple processors, specifically regarding the FLOP and SLAP attacks. These flaws exploit speculative execution mechanisms to leak sensitive…

  • Alerts: CISA Releases Seven Industrial Control Systems Advisories

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/28/cisa-releases-seven-industrial-control-systems-advisories Source: Alerts Title: CISA Releases Seven Industrial Control Systems Advisories Feedly Summary: CISA released seven Industrial Control Systems (ICS) advisories on January 28, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-028-01 B&R Automation Runtime ICSA-25-028-02 Schneider Electric Power Logic ICSA-25-028-03 Rockwell Automation FactoryTalk ICSA-25-028-04…

  • NCSC Feed: A method to assess ‘forgivable’ vs ‘unforgivable’ vulnerabilities

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ncsc.gov.uk/report/a-method-to-assess-forgivable-vs-unforgivable-vulnerabilities Source: NCSC Feed Title: A method to assess ‘forgivable’ vs ‘unforgivable’ vulnerabilities Feedly Summary: Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement. AI Summary and Description: Yes Summary: This text addresses a pressing issue in software security, focusing on the categorization of vulnerabilities…

  • NCSC Feed: Eradicating trivial vulnerabilities, at scale

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ncsc.gov.uk/blog-post/eradicating-trivial-vulnerabilities-at-scale Source: NCSC Feed Title: Eradicating trivial vulnerabilities, at scale Feedly Summary: A new NCSC research paper aims to reduce the presence of ‘unforgivable’ vulnerabilities. AI Summary and Description: Yes Summary: The NCSC’s 2024 Annual Review highlights the necessity of addressing foundational vulnerabilities in software to enhance global digital resilience. It emphasizes the…

  • Simon Willison’s Weblog: Introducing Operator

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/23/introducing-operator/ Source: Simon Willison’s Weblog Title: Introducing Operator Feedly Summary: Introducing Operator OpenAI released their “research preview" today of Operator, a cloud-based browser automation platform rolling out today to $200/month ChatGPT Pro subscribers. They’re calling this their first "agent". In the Operator announcement video Sam Altman defined that notoriously vague term like this:…

  • OpenAI : Operator System Card

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/operator-system-card Source: OpenAI Title: Operator System Card Feedly Summary: Drawing from OpenAI’s established safety frameworks, this document highlights our multi-layered approach, including model and product mitigations we’ve implemented to protect against prompt engineering and jailbreaks, protect privacy and security, as well as details our external red teaming efforts, safety evaluations, and ongoing work…