Experimental News Clipping Site

Tag: Risk Assessment

  • The Register: Google lands £400M MoD contract for secure UK cloud services

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/12/google_cloud_mod_contract/ Source: The Register Title: Google lands £400M MoD contract for secure UK cloud services Feedly Summary: Deal promises sovereign datacenters, AI, and cybersecurity to strengthen communication links with US The UK’s Ministry of Defence has signed a £400 million ($540 million) contract with Google sovereign cloud to support security and analytics workloads.……

  • Anchore: NPM Supply Chain Breach Response for Anchore Enterprise and Grype Users

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/npm-supply-chain-breach-response-for-anchore-enterprise-and-grype-users/ Source: Anchore Title: NPM Supply Chain Breach Response for Anchore Enterprise and Grype Users Feedly Summary: On September 8, 2025 Anchore was made aware of an incident involving a number of popular NPM packages to insert malware. The technical details of the attack can be found in the Aikido blog post: npm…

  • Schneier on Security: Indirect Prompt Injection Attacks Against LLM Assistants

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/09/indirect-prompt-injection-attacks-against-llm-assistants.html Source: Schneier on Security Title: Indirect Prompt Injection Attacks Against LLM Assistants Feedly Summary: Really good research on practical attacks against LLM agents. “Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous” Abstract: The growing integration of LLMs into applications has introduced new security risks,…

  • The Register: Internet mapping and research tool Censys reveals state-based abuse, harassment

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/03/censys_abuse_sigcomm_paper/ Source: The Register Title: Internet mapping and research tool Censys reveals state-based abuse, harassment Feedly Summary: ‘Universities are being used to proxy offensive government operations, turning research access decisions political’ Censys Inc, vendor of the popular Censys internet-mapping tool, has revealed that state-based actors are trying to abuse its services by hiding…

  • Cisco Security Blog: Closing the Backdoor in TACACS+: Why Full-Session Encryption Matters More Than Ever

    —

    by

    Kurt Seifried
    in

    Source URL: https://feedpress.me/link/23535/17134419/closing-the-backdoor-in-tacacs-why-full-session-encryption-matters-more-than-ever Source: Cisco Security Blog Title: Closing the Backdoor in TACACS+: Why Full-Session Encryption Matters More Than Ever Feedly Summary: Attackers exploited weak TACACS+ encryption to steal credentials and evade detection. Learn how Cisco ISE with TLS 1.3 and Duo MFA closes these backdoors. AI Summary and Description: Yes Summary: The text discusses…

  • NCSC Feed: From bugs to bypasses: adapting vulnerability disclosure for AI safeguards

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ncsc.gov.uk/blog-post/from-bugs-to-bypasses-adapting-vulnerability-disclosure-for-ai-safeguards Source: NCSC Feed Title: From bugs to bypasses: adapting vulnerability disclosure for AI safeguards Feedly Summary: Exploring how far cyber security approaches can help mitigate risks in generative AI systems AI Summary and Description: Yes Summary: The text addresses the intersection of cybersecurity strategies and generative AI systems, highlighting how established cybersecurity…

  • Slashdot: Pentagon Halts Chinese Coders Affecting DOD Cloud Systems

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/08/29/1928258/pentagon-halts-chinese-coders-affecting-dod-cloud-systems Source: Slashdot Title: Pentagon Halts Chinese Coders Affecting DOD Cloud Systems Feedly Summary: AI Summary and Description: Yes Summary: The Pentagon has terminated a Microsoft program that permitted Chinese coders to work on sensitive Department of Defense (DOD) cloud systems under U.S. supervision. This decision was made due to concerns about unacceptable…

  • Slashdot: Microsoft Refuses To Divulge Data Flows To Police Scotland

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/08/28/1815208/microsoft-refuses-to-divulge-data-flows-to-police-scotland?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Refuses To Divulge Data Flows To Police Scotland Feedly Summary: AI Summary and Description: Yes Summary: The text discusses concerns raised by Police Scotland and the Scottish Police Authority regarding the use of Microsoft Office 365 due to the lack of transparency from Microsoft about data processing locations…