Experimental News Clipping Site

Tag: security implications

  • Slashdot: Hundreds of E-Commerce Sites Hacked In Supply-Chain Attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/05/05/2034207/hundreds-of-e-commerce-sites-hacked-in-supply-chain-attack?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Hundreds of E-Commerce Sites Hacked In Supply-Chain Attack Feedly Summary: AI Summary and Description: Yes Summary: The text details a significant supply-chain attack affecting hundreds of e-commerce sites, including those of a large multinational company, that were compromised by malware capable of executing malicious code in browsers. This incident…

  • Simon Willison’s Weblog: Qwen3-8B

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/May/2/qwen3-8b/#atom-everything Source: Simon Willison’s Weblog Title: Qwen3-8B Feedly Summary: Having tried a few of the Qwen 3 models now my favorite is a bit of a surprise to me: I’m really enjoying Qwen3-8B. I’ve been running prompts through the MLX 4bit quantized version, mlx-community/Qwen3-8B-4bit. I’m using llm-mlx like this: llm install llm-mlx llm…

  • Embrace The Red: Model Context Protocol – New Sneaky Exploit, Risks and Mitigations

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/model-context-protocol-security-risks-and-exploits/ Source: Embrace The Red Title: Model Context Protocol – New Sneaky Exploit, Risks and Mitigations Feedly Summary: The Model Context Protocol (MCP) is a protocol definition for how LLM apps/agents can leverage external tools. I have been calling it Model Control Protocol at times, because due to prompt injection, MCP tool servers…

  • Schneier on Security: Privacy for Agentic AI

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/05/privacy-for-agentic-ai.html Source: Schneier on Security Title: Privacy for Agentic AI Feedly Summary: Sooner or later, it’s going to happen. AI systems will start acting as agents, doing things on our behalf with some degree of autonomy. I think it’s worth thinking about the security of that now, while its still a nascent idea.…

  • Gemini: Listen to a podcast deep dive on long context in Gemini models.

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.google/technology/google-deepmind/release-notes-podcast-long-context/ Source: Gemini Title: Listen to a podcast deep dive on long context in Gemini models. Feedly Summary: The latest episode of the Google AI: Release Notes podcast focuses on long context in Gemini — meaning how much information our AI models can process as input at once — … AI Summary and…

  • Slashdot: Nvidia and Anthropic Publicly Clash Over AI Chip Export Controls

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/05/01/1520202/nvidia-and-anthropic-publicly-clash-over-ai-chip-export-controls?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Nvidia and Anthropic Publicly Clash Over AI Chip Export Controls Feedly Summary: AI Summary and Description: Yes Summary: The ongoing dispute between Nvidia and Anthropic underscores significant tensions between AI hardware providers and model developers regarding export controls and national security implications. With the upcoming “AI Diffusion Rule,” the…

  • Slashdot: Millions of AirPlay Devices Can Be Hacked Over Wi-Fi

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/04/30/2115251/millions-of-airplay-devices-can-be-hacked-over-wi-fi?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Millions of AirPlay Devices Can Be Hacked Over Wi-Fi Feedly Summary: AI Summary and Description: Yes Summary: The newly uncovered AirBorne vulnerabilities in Apple’s AirPlay SDK pose significant security risks, potentially allowing attackers on the same Wi-Fi network to control a wide array of third-party devices, including smart TVs…

  • Wired: These Startups Are Building Advanced AI Models Without Data Centers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/these-startups-are-building-advanced-ai-models-over-the-internet-with-untapped-data/ Source: Wired Title: These Startups Are Building Advanced AI Models Without Data Centers Feedly Summary: A new crowd-trained way to develop LLMs over the internet could shake up the AI industry with a giant 100 billion-parameter model later this year. AI Summary and Description: Yes Summary: The text discusses an innovative crowd-trained…

  • CSA: Threat Modeling Google’s A2A Protocol

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/threat-modeling-google-s-a2a-protocol-with-the-maestro-framework Source: CSA Title: Threat Modeling Google’s A2A Protocol Feedly Summary: AI Summary and Description: Yes **Summary:** The text provides a comprehensive analysis of the security implications surrounding the A2A (Agent-to-Agent) protocol used in AI systems, highlighting the innovative MAESTRO threat modeling framework specifically designed for agentic AI. It details various types of…