Tag: monitoring

  • The Register: SonicWall releases rootkit-busting firmware update following wave of attacks

    Source URL: https://www.theregister.com/2025/09/23/sonicwall_rootkitbooting_firmware_update/ Source: The Register Title: SonicWall releases rootkit-busting firmware update following wave of attacks Feedly Summary: Security vendor’s no good, very bad week year SonicWall on Monday released a firmware update that the security vendor says will remove rootkit malware deployed in recent attacks targeting Secure Mobile Access (SMA) 100 appliances.… AI Summary…

  • Cisco Talos Blog: How RainyDay, Turian and a new PlugX variant abuse DLL search order hijacking

    Source URL: https://blog.talosintelligence.com/how-rainyday-turian-and-a-new-plugx-variant-abuse-dll-search-order-hijacking/ Source: Cisco Talos Blog Title: How RainyDay, Turian and a new PlugX variant abuse DLL search order hijacking Feedly Summary: Talos discovered that a new PlugX variant’s features overlap with both the RainyDay and Turian backdoors AI Summary and Description: Yes Summary: Cisco Talos has identified a new variant of the PlugX…

  • The Register: SIM city: Feds say 100,000-card farms could have killed cell towers in NYC

    Source URL: https://www.theregister.com/2025/09/23/secret_service_sim_bust/ Source: The Register Title: SIM city: Feds say 100,000-card farms could have killed cell towers in NYC Feedly Summary: Secret Service seizes 300-server network allegedly tied to nation-state hackers The US Secret Service has dismantled a network of SIM farms in and around New York City it claims was behind multiple incidents…

  • The Register: Kaspersky: RevengeHotels checks back in with AI-coded malware

    Source URL: https://www.theregister.com/2025/09/23/kaspersky_revengehotels_checks_back_in/ Source: The Register Title: Kaspersky: RevengeHotels checks back in with AI-coded malware Feedly Summary: Old hotel scam gets an AI facelift, leaving travellers’ card details even more at risk Kaspersky has raised the alarm over the resurgence of hotel-hacking outfit “RevengeHotels," which it claims is now using artificial intelligence to supercharge its…

  • Docker: MCP Horror Stories: The Drive-By Localhost Breach

    Source URL: https://www.docker.com/blog/mpc-horror-stories-cve-2025-49596-local-host-breach/ Source: Docker Title: MCP Horror Stories: The Drive-By Localhost Breach Feedly Summary: This is Part 4 of our MCP Horror Stories series, where we examine real-world security incidents that expose the devastating vulnerabilities in AI infrastructure and demonstrate how Docker MCP Gateway provides enterprise-grade protection against sophisticated attack vectors. The Model Context…

  • The Register: AI gone rogue: Models may try to stop people from shutting them down, Google warns

    Source URL: https://www.theregister.com/2025/09/22/google_ai_misalignment_risk/ Source: The Register Title: AI gone rogue: Models may try to stop people from shutting them down, Google warns Feedly Summary: Misalignment risk? That’s an area for future study Google DeepMind added a new AI threat scenario – one where a model might try to prevent its operators from modifying it or…

  • Simon Willison’s Weblog: Grok 4 Fast

    Source URL: https://simonwillison.net/2025/Sep/20/grok-4-fast/ Source: Simon Willison’s Weblog Title: Grok 4 Fast Feedly Summary: Grok 4 Fast New hosted reasoning model from xAI that’s designed to be fast and extremely competitive on price. It has a 2 million token context window and “was trained end-to-end with tool-use reinforcement learning". It’s priced at $0.20/million input tokens and…

  • Slashdot: Self-Replicating Worm Affected Several Hundred NPM Packages, Including CrowdStrike’s

    Source URL: https://it.slashdot.org/story/25/09/20/0542237/self-replicating-worm-affected-several-hundred-npm-packages-including-crowdstrikes Source: Slashdot Title: Self-Replicating Worm Affected Several Hundred NPM Packages, Including CrowdStrike’s Feedly Summary: AI Summary and Description: Yes Summary: The Shai-Hulud malware campaign has affected numerous npm packages, including those maintained by CrowdStrike, via the injection of malicious scripts designed to steal developer credentials and exfiltrate sensitive information. The campaign highlights…