Experimental News Clipping Site

Tag: Security Vulnerabilities

  • OpenAI : Codex is now generally available

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/codex-now-generally-available Source: OpenAI Title: Codex is now generally available Feedly Summary: OpenAI Codex is now generally available with powerful new features for developers: a Slack integration, Codex SDK, and admin tools like usage dashboards and workspace management—making Codex easier to use and manage at scale. AI Summary and Description: Yes Summary: The announcement…

  • Wired: Vibe Coding Is the New Open Source—in the Worst Way Possible

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/vibe-coding-is-the-new-open-source/ Source: Wired Title: Vibe Coding Is the New Open Source—in the Worst Way Possible Feedly Summary: As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way. AI Summary and Description: Yes Summary: The text…

  • Schneier on Security: Daniel Miessler on the AI Attack/Defense Balance

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/10/daniel-miessler-on-the-ai-attack-defense-balance.html Source: Schneier on Security Title: Daniel Miessler on the AI Attack/Defense Balance Feedly Summary: His conclusion: Context wins Basically whoever can see the most about the target, and can hold that picture in their mind the best, will be best at finding the vulnerabilities the fastest and taking advantage of them. Or,…

  • Simon Willison’s Weblog: Daniel Stenberg’s note on AI assisted curl bug reports

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Oct/2/curl/ Source: Simon Willison’s Weblog Title: Daniel Stenberg’s note on AI assisted curl bug reports Feedly Summary: Daniel Stenberg’s note on AI assisted curl bug reports Curl maintainer Daniel Stenberg on Mastodon: Joshua Rogers sent us a massive list of potential issues in #curl that he found using his set of AI assisted…

  • Slashdot: Intel and AMD Trusted Enclaves, a Foundation For Network Security, Fall To Physical Attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/10/01/229239/intel-and-amd-trusted-enclaves-a-foundation-for-network-security-fall-to-physical-attacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Intel and AMD Trusted Enclaves, a Foundation For Network Security, Fall To Physical Attacks Feedly Summary: AI Summary and Description: Yes Summary: Researchers have introduced two significant hardware attacks, Battering RAM and Wiretap, that compromise Intel SGX and AMD SEV-SNP trusted enclaves. These attacks exploit flaws in deterministic encryption…

  • Simon Willison’s Weblog: Two more Chinese pelicans

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Oct/1/two-pelicans/#atom-everything Source: Simon Willison’s Weblog Title: Two more Chinese pelicans Feedly Summary: Two new models from Chinese AI labs in the past few days. I tried them both out using llm-openrouter: DeepSeek-V3.2-Exp from DeepSeek. Announcement, Tech Report, Hugging Face (690GB, MIT license). As an intermediate step toward our next-generation architecture, V3.2-Exp builds upon…

  • Schneier on Security: Abusing Notion’s AI Agent for Data Theft

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/09/abusing-notions-ai-agent-for-data-theft.html Source: Schneier on Security Title: Abusing Notion’s AI Agent for Data Theft Feedly Summary: Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson’s lethal trifecta, it’s vulnerable to data theft though prompt injection. First, the trifecta: The lethal trifecta of capabilities is: Access to your private…

  • Wired: An App Used to Dox Charlie Kirk Critics Doxed Its Own Users Instead

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/app-used-to-dox-charlie-kirk-critics-doxed-its-own-users-instead/ Source: Wired Title: An App Used to Dox Charlie Kirk Critics Doxed Its Own Users Instead Feedly Summary: Plus: A ransomeware gang steals data on 8,000 preschoolers, Microsoft blocks Israel’s military from using its cloud for surveillance, call-recording app Neon hits pause over security holes, and more. AI Summary and Description: Yes…

  • Slashdot: Chinese Hackers Breach US Software and Law Firms Amid Trade Fight

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/09/26/1836203/chinese-hackers-breach-us-software-and-law-firms-amid-trade-fight?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Chinese Hackers Breach US Software and Law Firms Amid Trade Fight Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a sophisticated hacking campaign by suspected Chinese hackers targeting US software developers and law firms, as reported by cybersecurity firm Mandiant. The implications for cloud computing security…