Tag: risks

—

by

Source URL: https://simonwillison.net/2025/Jun/19/atlassian-prompt-injection-mcp/ Source: Simon Willison’s Weblog Title: Cato CTRL™ Threat Research: PoC Attack Targeting Atlassian’s Model Context Protocol (MCP) Introduces New “Living off AI” Risk Feedly Summary: Cato CTRL™ Threat Research: PoC Attack Targeting Atlassian’s Model Context Protocol (MCP) Introduces New “Living off AI” Risk Stop me if you’ve heard this one before: A…

Slashdot: Microsoft 365 Brings the Shutters Down On Legacy Protocols

—

by

Source URL: https://it.slashdot.org/story/25/06/19/2046206/microsoft-365-brings-the-shutters-down-on-legacy-protocols?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft 365 Brings the Shutters Down On Legacy Protocols Feedly Summary: AI Summary and Description: Yes **Summary:** Microsoft 365 is set to enhance security by blocking legacy authentication protocols starting July 2025 as part of its “Secure by Default” initiative. This move aims to mitigate risks associated with vulnerable…

Slashdot: The 16-Billion-Record Data Breach That No One’s Ever Heard of

—

by

Source URL: https://it.slashdot.org/story/25/06/19/2028246/the-16-billion-record-data-breach-that-no-ones-ever-heard-of?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The 16-Billion-Record Data Breach That No One’s Ever Heard of Feedly Summary: AI Summary and Description: Yes Summary: The text discusses one of the largest data breaches in history, revealing 16 billion exposed login credentials primarily from infostealer sources. This highlights significant risks for individuals and organizations, including potential…

The Register: Microsoft 365 brings the shutters down on legacy protocols

—

by

Source URL: https://www.theregister.com/2025/06/19/the_microsoft_axeman_is_coming/ Source: The Register Title: Microsoft 365 brings the shutters down on legacy protocols Feedly Summary: FrontPage Remote Procedure Call and others set to be blocked in the name of ‘Secure by Default’ Microsoft has warned administrators that legacy authentication protocols will be blocked by default from July, meaning that anyone who hasn’t…

The Register: Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware

—

by

Source URL: https://www.theregister.com/2025/06/19/sneaky_serpentinecloud_slithers_through_cloudflare/ Source: The Register Title: Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware Feedly Summary: Phishing, Python and RATs, oh my A sneaky malware campaign slithers through Cloudflare tunnel subdomains to execute in-memory malicious code and give unknown attackers long-term access to pwned machines.… AI Summary and Description: Yes…

The Register: Minecraft cheaters never win … but they may get malware

—

by

Source URL: https://www.theregister.com/2025/06/18/minecraft_mod_malware/ Source: The Register Title: Minecraft cheaters never win … but they may get malware Feedly Summary: Infostealers posing as popular cheat tools are cropping up on GitHub Trojanized Minecraft cheat tools hosted on GitHub have secretly installed stealers that siphon credentials, crypto wallets, and other sensitive data when executed by players.… AI…

The Register: Asana’s cutting-edge AI feature ran into a little data leakage problem

—

by

Source URL: https://www.theregister.com/2025/06/18/asana_mcp_server_bug/ Source: The Register Title: Asana’s cutting-edge AI feature ran into a little data leakage problem Feedly Summary: New MCP server was shut down for nearly two weeks Asana has fixed a bug in its Model Context Protocol (MCP) server that could have allowed users to view other organizations’ data, and the experimental…

Cloud Blog: What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/creative-phishing-academics-critics-of-russia/ Source: Cloud Blog Title: What’s in an ASP? Creative Phishing Attack on Prominent Academics and Critics of Russia Feedly Summary: Written by: Gabby Roncone, Wesley Shields In cooperation with external partners, Google Threat Intelligence Group (GTIG) observed a Russia state-sponsored cyber threat actor impersonating the U.S. Department of State. From at least…

OpenAI : Preparing for future AI risks in biology

—

by