Experimental News Clipping Site

Tag: security professionals

  • Slashdot: Google’s ‘AI Overview’ Pointed Him to a Customer Number. It Was a Scam

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/08/18/0223228/googles-ai-overview-pointed-him-to-a-customer-number-it-was-a-scam?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google’s ‘AI Overview’ Pointed Him to a Customer Number. It Was a Scam Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a scam where a real estate developer was tricked into providing credit card information to an impersonator posing as a customer service representative for a…

  • Embrace The Red: Data Exfiltration via Image Rendering Fixed in Amp Code

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amp-code-fixed-data-exfiltration-via-images/ Source: Embrace The Red Title: Data Exfiltration via Image Rendering Fixed in Amp Code Feedly Summary: In this post we discuss a vulnerability that was present in Amp Code from Sourcegraph by which an attacker could exploit markdown driven image rendering to exfiltrate sensitive information. This vulnerability is common in AI applications…

  • Embrace The Red: Amp Code: Invisible Prompt Injection Fixed by Sourcegraph

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amp-code-fixed-invisible-prompt-injection/ Source: Embrace The Red Title: Amp Code: Invisible Prompt Injection Fixed by Sourcegraph Feedly Summary: In this post we will look at Amp, a coding agent from Sourcegraph. The other day we discussed how invisible instructions impact Google Jules. Turns out that many client applications are vulnerable to these kinds of attacks…

  • The Register: Typhoon-adjacent Chinese crew broke into Taiwanese web host

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/15/typhoonadjacent_chinese_crew_taiwan_web_servers/ Source: The Register Title: Typhoon-adjacent Chinese crew broke into Taiwanese web host Feedly Summary: Is that a JuicyPotato on your network? A suspected Chinese-government-backed cyber crew recently broke into a Taiwanese web hosting provider to steal credentials and plant backdoors for long-term access, using a mix of open-source and custom software tools,…

  • Slashdot: Proton Begins Shifting Infrastructure Outside of Switzerland Ahead of Surveillance Legislation

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/08/15/1612259/proton-begins-shifting-infrastructure-outside-of-switzerland-ahead-of-surveillance-legislation?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Proton Begins Shifting Infrastructure Outside of Switzerland Ahead of Surveillance Legislation Feedly Summary: AI Summary and Description: Yes Summary: Proton is proactively relocating its infrastructure outside Switzerland in response to forthcoming surveillance legislation that poses threats to user privacy and data retention requirements. The move begins with the AI…

  • The Register: Cisco’s Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/15/cisco_secure_firewall_management_bug/ Source: The Register Title: Cisco’s Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole Feedly Summary: Switchzilla’s summer of perfect 10s Cisco has issued a patch for a maximum-severity bug in its Secure Firewall Management Center (FMC) software that could allow an unauthenticated, remote attacker to inject arbitrary…

  • Embrace The Red: Google Jules is Vulnerable To Invisible Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/google-jules-invisible-prompt-injection/ Source: Embrace The Red Title: Google Jules is Vulnerable To Invisible Prompt Injection Feedly Summary: The latest Gemini models quite reliably interpret hidden Unicode Tag characters as instructions. This vulnerability, first reported to Google over a year ago, has not been mitigated at the model or API level, hence now affects all…

  • Slashdot: Foxconn Now Making More From Servers than iPhones

    —

    by

    Kurt Seifried
    in

    Source URL: https://apple.slashdot.org/story/25/08/15/0631212/foxconn-now-making-more-from-servers-than-iphones?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Foxconn Now Making More From Servers than iPhones Feedly Summary: AI Summary and Description: Yes Summary: The report highlights Foxconn’s significant shift in revenue generation, with its AI server production now surpassing its traditional consumer electronics revenues. This shift emphasizes the growing market demand for AI infrastructure, indicating a…