Tag: security professionals
-
Slashdot: New Hack Uses Prompt Injection To Corrupt Gemini’s Long-Term Memory
Source URL: https://it.slashdot.org/story/25/02/12/0011205/new-hack-uses-prompt-injection-to-corrupt-geminis-long-term-memory?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: New Hack Uses Prompt Injection To Corrupt Gemini’s Long-Term Memory Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a newly demonstrated attack by researcher Johann Rehberger that compromises Google’s Gemini chatbot by manipulating its long-term memory functionality through untrusted document summarization. The attack bypasses existing prompt…
-
The Register: February’s Patch Tuesday sees Microsoft offer just 63 fixes
Source URL: https://www.theregister.com/2025/02/12/patch_tuesday_february_2025/ Source: The Register Title: February’s Patch Tuesday sees Microsoft offer just 63 fixes Feedly Summary: Don’t relax just yet: Redmond has made some certificate-handling changes that could trip unprepared admins Patch Tuesday Microsoft’s February patch collection is mercifully smaller than January’s mega-dump. But don’t get too relaxed – some deserve close attention,…
-
The Register: Probe finds US Coast Guard has left maritime cybersecurity adrift
Source URL: https://www.theregister.com/2025/02/11/coast_guard_cybersecurity_fail/ Source: The Register Title: Probe finds US Coast Guard has left maritime cybersecurity adrift Feedly Summary: Numerous systemic vulnerabilities could scuttle $5.4T industry Despite the escalating cyber threats targeting America’s maritime transportation system, the US Coast Guard still lacks a comprehensive strategy to secure this critical infrastructure – nor does it have…
-
Slashdot: AUKUS Blasts Holes In LockBit’s Bulletproof Hosting Provider
Source URL: https://it.slashdot.org/story/25/02/11/2156211/aukus-blasts-holes-in-lockbits-bulletproof-hosting-provider?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: AUKUS Blasts Holes In LockBit’s Bulletproof Hosting Provider Feedly Summary: AI Summary and Description: Yes **Summary:** The US, UK, and Australia have sanctioned Zservers, a Russian bulletproof hosting provider, due to its involvement with the LockBit ransomware operations. This collaborative effort underscores the importance of disrupting criminal infrastructures that…
-
Slashdot: Google Chrome May Soon Use ‘AI’ To Replace Compromised Passwords
Source URL: https://it.slashdot.org/story/25/02/11/1952248/google-chrome-may-soon-use-ai-to-replace-compromised-passwords?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Chrome May Soon Use ‘AI’ To Replace Compromised Passwords Feedly Summary: AI Summary and Description: Yes Summary: Google’s Chrome browser is set to enhance security by introducing an AI-driven feature that detects compromised passwords and automatically generates stronger replacements. This upgrade aims to streamline the process of password…
-
Cisco Talos Blog: Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities
Source URL: https://blog.talosintelligence.com/february-patch-tuesday-release/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities Feedly Summary: Microsoft has released its monthly security update for January of 2025 which includes 58 vulnerabilities, including 3 that Microsoft marked as “critical” and one marked as “moderate". The remaining vulnerabilities listed are classified…
-
Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog
Source URL: https://www.cisa.gov/news-events/alerts/2025/02/11/cisa-adds-four-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability CVE-2025-21418 Microsoft Windows Ancillary Function Driver for…
-
The Register: AUKUS blasts holes in LockBit’s bulletproof hosting provider
Source URL: https://www.theregister.com/2025/02/11/aukus_zservers_lockbit_sanctions/ Source: The Register Title: AUKUS blasts holes in LockBit’s bulletproof hosting provider Feedly Summary: UK foreign secretary says Putin is running a ‘corrupt mafia state’ One of the bulletproof hosting (BPH) providers used by the LockBit ransomware operation has been hit with sanctions in the US, UK, and Australia (AUKUS), along with…
-
Alerts: CISA Releases Two Industrial Control Systems Advisories
Source URL: https://www.cisa.gov/news-events/alerts/2025/02/11/cisa-releases-two-industrial-control-systems-advisories Source: Alerts Title: CISA Releases Two Industrial Control Systems Advisories Feedly Summary: CISA released two Industrial Control Systems (ICS) advisories on February 11, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-319-17 2N Access Commander (Update A) ICSA-25-037-04 Trimble Cityworks (Update A) CISA encourages users…