Tag: risks

Source URL: https://embracethered.com/blog/posts/2025/anthropic-filesystem-mcp-server-bypass/ Source: Embrace The Red Title: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation Feedly Summary: A few months ago I was looking at the filesystem MCP server from Anthropic. The server allows to give an AI, like Claude Desktop, access to the local filesystem to read files or edit…

Slashdot: America’s Los Alamos Lab Is Now Investing Heavily In AI For Science

Aug 3, 2025

—

by

Source URL: https://yro.slashdot.org/story/25/08/03/0447207/americas-los-alamos-lab-is-now-investing-heavily-in-ai-for-science Source: Slashdot Title: America’s Los Alamos Lab Is Now Investing Heavily In AI For Science Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the establishment of a National Security AI Office at Los Alamos National Lab, emphasizing the importance of AI in advancing scientific research and national security. With…

The Register: OpenAI removes ChatGPT self-doxing option

—

by

Source URL: https://www.theregister.com/2025/08/01/openai_removes_chatgpt_selfdoxing_option/ Source: The Register Title: OpenAI removes ChatGPT self-doxing option Feedly Summary: Checkbox to make chatbot conversations appear in search engines deemed a footgun OpenAI has removed the option to make ChatGPT interactions indexable by search engines to prevent users from unwittingly exposing sensitive information.… AI Summary and Description: Yes Summary: OpenAI’s decision…

The Register: Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

—

by

Source URL: https://www.theregister.com/2025/08/01/microsoft_recall_captures_credit_card_info/ Source: The Register Title: Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks Feedly Summary: Our tests have shown there are ways to get around the promised security improvements exclusive Microsoft Recall, the AI app that takes screenshots of what you do on your PC so…

The Register: China says US spies exploited Microsoft Exchange zero-day to steal military info

—

by

Source URL: https://www.theregister.com/2025/08/01/china_us_intel_attacks/ Source: The Register Title: China says US spies exploited Microsoft Exchange zero-day to steal military info Feedly Summary: Spy vs. spy China has accused US intelligence agencies of exploiting a Microsoft Exchange zero-day exploit to steal defense-related data and take over more than 50 devices belonging to a “major Chinese military enterprise"…

Embrace The Red: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection

—

by

Source URL: https://embracethered.com/blog/posts/2025/chatgpt-chat-history-data-exfiltration/ Source: Embrace The Red Title: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection Feedly Summary: In this post we demonstrate how a bypass in OpenAI’s “safe URL” rendering feature allows ChatGPT to send personal information to a third-party server. This can be exploited by an adversary via a prompt injection…

The Cloudflare Blog: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME)

—

by

Source URL: https://blog.cloudflare.com/vulnerability-disclosure-on-ssl-for-saas-v1-managed-cname/ Source: The Cloudflare Blog Title: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME) Feedly Summary: An upcoming vulnerability disclosure in Cloudflare’s SSL for SaaSv1 is detailed, explaining the steps we’ve taken towards deprecation. AI Summary and Description: Yes Summary: The text discusses a vulnerability discovered in Cloudflare’s SSL for SaaS v1…

Anton on Security – Medium: Google Cloud Security Threat Horizons Report #12 Is Out!

Jul 31, 2025

—

by

Source URL: https://medium.com/anton-on-security/google-cloud-security-threat-horizons-report-12-is-out-6e84e700467f?source=rss—-8e8c3ed26c4c—4 Source: Anton on Security – Medium Title: Google Cloud Security Threat Horizons Report #12 Is Out! Feedly Summary: AI Summary and Description: Yes Summary: The text discusses insights from Google Cloud’s Threat Horizons Report #12, focusing on key security vulnerabilities in cloud environments. It highlights the persistent exploitation of issues like credential…

The Register: NIST discovers DevSecOps, thinks world should really check this out

Jul 31, 2025

—

by