Tag: security measure

Source URL: https://www.theregister.com/2025/08/04/infosec_in_brief/ Source: The Register Title: Lazarus Group rises again, this time with malware-laden fake FOSS Feedly Summary: PLUS: Slow MFA rollout costs Canucks $5m; Lawmakers ponder Stingray ban; MSFT tightens Teams; And more! Infosec In Brief North Korea’s Lazarus Group has changed tactics and is now creating malware-laden open source software.… AI Summary…

The Register: Silent Push CEO on cybercrime takedowns: ‘It’s an ongoing cat-and-mouse game’

Aug 3, 2025

—

by

Source URL: https://www.theregister.com/2025/08/03/silent_push_ceo_talks_cybercrime/ Source: The Register Title: Silent Push CEO on cybercrime takedowns: ‘It’s an ongoing cat-and-mouse game’ Feedly Summary: Plus: why takedowns aren’t in threat-intel analysts’ best interest interview It started out small: One US financial services company wanted to stop unknown crooks from spoofing their trading app, tricking customers into giving the digital…

Embrace The Red: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation

Aug 3, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/anthropic-filesystem-mcp-server-bypass/ Source: Embrace The Red Title: Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation Feedly Summary: A few months ago I was looking at the filesystem MCP server from Anthropic. The server allows to give an AI, like Claude Desktop, access to the local filesystem to read files or edit…

The Register: CISA roasts unnamed critical national infrastructure body for shoddy security hygiene

Aug 2, 2025

—

by

Source URL: https://www.theregister.com/2025/08/02/cisa_coast_guard_cni/ Source: The Register Title: CISA roasts unnamed critical national infrastructure body for shoddy security hygiene Feedly Summary: Plaintext passwords, shared admin accounts, and insufficient logging rampant at mystery org CISA is using the findings from a recent probe of an unidentified critical infrastructure organization to warn about the dangers of getting cybersecurity…

Embrace The Red: Turning ChatGPT Codex Into A ZombAI Agent

Aug 2, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/chatgpt-codex-remote-control-zombai/ Source: Embrace The Red Title: Turning ChatGPT Codex Into A ZombAI Agent Feedly Summary: Today we cover ChatGPT Codex as part of the Month of AI Bugs series. ChatGPT Codex is a cloud-based software engineering agent that answers codebase questions, executes code, and drafts pull requests. In particular, this post will demonstrate…

Simon Willison’s Weblog: Faster inference

—

by

Source URL: https://simonwillison.net/2025/Aug/1/faster-inference/ Source: Simon Willison’s Weblog Title: Faster inference Feedly Summary: Two interesting examples of inference speed as a flagship feature of LLM services today. First, Cerebras announced two new monthly plans for their extremely high speed hosted model service: Cerebras Code Pro ($50/month, 1,000 messages a day) and Cerebras Code Max ($200/month, 5,000/day).…

The Register: OpenAI removes ChatGPT self-doxing option

—

by

Source URL: https://www.theregister.com/2025/08/01/openai_removes_chatgpt_selfdoxing_option/ Source: The Register Title: OpenAI removes ChatGPT self-doxing option Feedly Summary: Checkbox to make chatbot conversations appear in search engines deemed a footgun OpenAI has removed the option to make ChatGPT interactions indexable by search engines to prevent users from unwittingly exposing sensitive information.… AI Summary and Description: Yes Summary: OpenAI’s decision…

The Register: Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

—

by

Source URL: https://www.theregister.com/2025/08/01/microsoft_recall_captures_credit_card_info/ Source: The Register Title: Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks Feedly Summary: Our tests have shown there are ways to get around the promised security improvements exclusive Microsoft Recall, the AI app that takes screenshots of what you do on your PC so…

The Register: China says US spies exploited Microsoft Exchange zero-day to steal military info

—

by