Experimental News Clipping Site

Tag: phishing

  • Krebs on Security: Self-Replicating Worm Hits 180+ Software Packages

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/ Source: Krebs on Security Title: Self-Replicating Worm Hits 180+ Software Packages Feedly Summary: At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub, experts warn. The malware, which briefly infected multiple code packages…

  • The Register: ‘FileFix’ attacks use fake Facebook security alerts to trick victims into running infostealers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/16/filefix_attacks_facebook_security_alert/ Source: The Register Title: ‘FileFix’ attacks use fake Facebook security alerts to trick victims into running infostealers Feedly Summary: Tech evolved from PoC to global campaign in under two months An attack called FileFix is masquerading as a Facebook security alert before ultimately dropping the widely used StealC infostealer and malware downloader.……

  • The Cloudflare Blog: Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare’s SASE platform

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/integrating-crowdstrike-falcon-fusion-soar-with-cloudflares-sase-platform/ Source: The Cloudflare Blog Title: Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare’s SASE platform Feedly Summary: Cloudflare and CrowdStrike have partnered to help SOC teams minimize manual bottlenecks. By combining Cloudflare’s SASE platform with CrowdStrike’s Falcon® Fusion SOAR, security teams can now detect AI Summary and Description: Yes Summary: The text discusses…

  • Schneier on Security: Indirect Prompt Injection Attacks Against LLM Assistants

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/09/indirect-prompt-injection-attacks-against-llm-assistants.html Source: Schneier on Security Title: Indirect Prompt Injection Attacks Against LLM Assistants Feedly Summary: Really good research on practical attacks against LLM agents. “Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous” Abstract: The growing integration of LLMs into applications has introduced new security risks,…