Experimental News Clipping Site

Tag: phishing

  • The Register: CDNs: Great for speeding up the internet, bad for location privacy

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/27/cloudflare_cdn_location_data/ Source: The Register Title: CDNs: Great for speeding up the internet, bad for location privacy Feedly Summary: Also, Subaru web portal spills user deets, Tornado Cash sanctions overturned, a Stark ransomware attack, and more Infosec in brief Using a custom-built tool, a 15-year-old hacker exploited Cloudflare’s content delivery network to approximate the…

  • Simon Willison’s Weblog: ChatGPT Operator system prompt

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/26/chatgpt-operator-system-prompt/#atom-everything Source: Simon Willison’s Weblog Title: ChatGPT Operator system prompt Feedly Summary: ChatGPT Operator system prompt Johann Rehberger snagged a copy of the ChatGPT Operator system prompt. As usual, the system prompt doubles as better written documentation than any of the official sources. It asks users for confirmation a lot: ## Confirmations Ask…

  • Hacker News: A phishing attack involving g.co, Google’s URL shortener

    —

    by

    Kurt Seifried
    in

    Source URL: https://gist.github.com/zachlatta/f86317493654b550c689dc6509973aa4 Source: Hacker News Title: A phishing attack involving g.co, Google’s URL shortener Feedly Summary: Comments AI Summary and Description: Yes Summary: The provided text describes a sophisticated phishing scam involving the impersonation of Google Workspace support, highlighting critical security implications for organizations reliant on cloud services. It emphasizes the need for stringent…

  • Cisco Talos Blog: Seasoning email threats with hidden text salting

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/seasoning-email-threats-with-hidden-text-salting/ Source: Cisco Talos Blog Title: Seasoning email threats with hidden text salting Feedly Summary: Hidden text salting is a simple yet effective technique for bypassing email parsers, confusing spam filters, and evading detection engines that rely on keywords. Cisco Talos observed an increase in the number of email threats leveraging hidden text…

  • Simon Willison’s Weblog: Introducing Operator

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/23/introducing-operator/ Source: Simon Willison’s Weblog Title: Introducing Operator Feedly Summary: Introducing Operator OpenAI released their “research preview" today of Operator, a cloud-based browser automation platform rolling out today to $200/month ChatGPT Pro subscribers. They’re calling this their first "agent". In the Operator announcement video Sam Altman defined that notoriously vague term like this:…

  • CSA: RBI & BYOD: Securing Personal Devices in the Workplace

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.reemo.io/rbi-and-byod-policies-securing-personal-devices-in-the-workplace Source: CSA Title: RBI & BYOD: Securing Personal Devices in the Workplace Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the security challenges posed by Bring Your Own Device (BYOD) policies in the context of hybrid work and presents Remote Browser Isolation (RBI) as an effective solution. The insights…

  • The Register: Supply chain attack hits Chrome extensions, could expose millions

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/22/supply_chain_attack_chrome_extension/ Source: The Register Title: Supply chain attack hits Chrome extensions, could expose millions Feedly Summary: Threat actor exploited phishing and OAuth abuse to inject malicious code Cybersecurity outfit Sekoia is warning Chrome users of a supply chain attack targeting browser extension developers that has potentially impacted hundreds of thousands of individuals already.……

  • Microsoft Security Blog: New Star Blizzard spear-phishing campaign targets WhatsApp accounts

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/01/16/new-star-blizzard-spear-phishing-campaign-targets-whatsapp-accounts/ Source: Microsoft Security Blog Title: New Star Blizzard spear-phishing campaign targets WhatsApp accounts Feedly Summary: In mid-November 2024, Microsoft Threat Intelligence observed the Russian threat actor we track as Star Blizzard sending their typical targets spear-phishing messages, this time offering the supposed opportunity to join a WhatsApp group. This is the first…

  • CSA: How to Combat Social Engineering Attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://abnormalsecurity.com/blog/soc-expert-perspectives-social-engineering-threats Source: CSA Title: How to Combat Social Engineering Attacks Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses the increasing threat of social engineering attacks and highlights key insights from cybersecurity experts regarding the vulnerabilities associated with human behavior, advanced attack techniques such as deepfakes, and the necessity for AI-driven…