security assessments – Page 2 – Experimental News Clipping Site

Embrace The Red: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection

Aug 19, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-data-exfil-via-dns/ Source: Embrace The Red Title: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection Feedly Summary: The next three posts will cover high severity vulnerabilities in the Amazon Q Developer VS Code Extension (Amazon Q), which is a very popular coding agent, with over 1 million downloads. It is vulnerable to…

Cloud Blog: Beyond guardrails: A taxonomy of platform engineering control mechanisms

Aug 15, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://cloud.google.com/blog/products/application-modernization/platform-engineering-control-mechanisms/ Source: Cloud Blog Title: Beyond guardrails: A taxonomy of platform engineering control mechanisms Feedly Summary: The promise of platform engineering is to accelerate software delivery by empowering developers with self-service capabilities. However, this must be balanced with security, compliance, and operational stability, and for this, you need robust controls. But all too…

The Register: Secure chat darling Matrix admits pair of ‘high severity’ protocol flaws need painful fixes

Aug 13, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/13/secure_chat_darling_matrix_admits/ Source: The Register Title: Secure chat darling Matrix admits pair of ‘high severity’ protocol flaws need painful fixes Feedly Summary: Foundation warns federated servers face biggest risk, but single-instance users can take their time The maintainers of the federated secure chat protocol Matrix are warning users of a pair of “high severity…

Unit 42: Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild

Aug 11, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/erlang-otp-cve-2025-32433/ Source: Unit 42 Title: Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild Feedly Summary: CVE-2025-32433 allows for remote code execution in sshd for certain versions of Erlang programming language’s OTP. We reproduced this CVE and share our findings. The post Keys to the Kingdom: Erlang/OTP SSH…

The Register: The inside story of the Telemessage saga, and how you can view the data

Aug 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/08/10/telemessage_archive_online/ Source: The Register Title: The inside story of the Telemessage saga, and how you can view the data Feedly Summary: It turns out no one was clean on OPSEC DEF CON On Saturday at DEF CON, security boffin Micah Lee explained just how he hacked into TeleMessage, the supposedly secure messaging app…

Wired: A Misconfiguration That Haunts Corporate Streaming Platforms Could Expose Sensitive Data

Aug 8, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.wired.com/story/corporate-livestreams-exposed-search-tool/ Source: Wired Title: A Misconfiguration That Haunts Corporate Streaming Platforms Could Expose Sensitive Data Feedly Summary: A security researcher discovered that flawed API configurations are plaguing corporate livestreaming platforms, potentially exposing internal company meetings—and he’s releasing a tool to find them. AI Summary and Description: Yes Summary: The text highlights a security…

Slashdot: Encryption Made For Police and Military Radios May Be Easily Cracked

Aug 7, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://it.slashdot.org/story/25/08/07/217234/encryption-made-for-police-and-military-radios-may-be-easily-cracked Source: Slashdot Title: Encryption Made For Police and Military Radios May Be Easily Cracked Feedly Summary: AI Summary and Description: Yes Summary: The text highlights critical vulnerabilities in an encryption algorithm widely used in radios for essential sectors, including law enforcement and military. After researchers discovered a backdoor in the original algorithm,…

Wired: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT

Aug 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.wired.com/story/poisoned-document-could-leak-secret-data-chatgpt/ Source: Wired Title: A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT Feedly Summary: Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction. AI Summary and Description: Yes Summary:…

Embrace The Red: I Spent $500 To Test Devin For Prompt Injection So That You Don’t Have To

Aug 6, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://embracethered.com/blog/posts/2025/devin-i-spent-usd500-to-hack-devin/ Source: Embrace The Red Title: I Spent $500 To Test Devin For Prompt Injection So That You Don’t Have To Feedly Summary: Today we cover Devin from Cognition, the first AI Software Engineer. We will cover Devin proof-of-concept exploits in multiple posts over the next few days. In this first post, we…

The Register: Cisco donates Agntcy project to Linux Foundation in the hope it gets AI agents interacting elegantly

Jul 30, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://www.theregister.com/2025/07/30/agntcy_lf_donation/ Source: The Register Title: Cisco donates Agntcy project to Linux Foundation in the hope it gets AI agents interacting elegantly Feedly Summary: AI frameworks are becoming a Russian nesting doll of abstraction layers Cisco’s Agntcy project is the latest AI framework to find refuge at the Linux Foundation.… AI Summary and Description:…

Tag: security assessments