Tag: threat landscape

—

by

Source URL: https://simonwillison.net/2025/Aug/15/the-summer-of-johann/#atom-everything Source: Simon Willison’s Weblog Title: The Summer of Johann: prompt injections as far as the eye can see Feedly Summary: Independent AI researcher Johann Rehberger has had an absurdly busy August. Under the heading The Month of AI Bugs he has been publishing one report per day across an array of different…

Krebs on Security: Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme

—

by

Source URL: https://krebsonsecurity.com/2025/08/mobile-phishers-target-brokerage-accounts-in-ramp-and-dump-cashout-scheme/ Source: Krebs on Security Title: Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme Feedly Summary: Cybercriminal groups peddling sophisticated phishing kits that convert stolen card data into mobile wallets have recently shifted their focus to targeting customers of brokerage services, new research shows. Undeterred by security controls at these…

The Register: Telco giant Colt suffers attack, takes systems offline

—

by

Source URL: https://www.theregister.com/2025/08/15/london_telco_colts_services_disrupted/ Source: The Register Title: Telco giant Colt suffers attack, takes systems offline Feedly Summary: London-based multinational takes customer portal and Voice API platform offline as ‘protective measure’ following breach Multinational telco Colt Technology Services says a “cyber incident" is to blame for its customer portal and other services being down for a…

The Register: LLM chatbots trivial to weaponise for data theft, say boffins

—

by

Source URL: https://www.theregister.com/2025/08/15/llm_chatbots_trivial_to_weaponise/ Source: The Register Title: LLM chatbots trivial to weaponise for data theft, say boffins Feedly Summary: System prompt engineering turns benign AI assistants into ‘investigator’ and ‘detective’ roles that bypass privacy guardrails A team of boffins is warning that AI chatbots built on large language models (LLM) can be tuned into malicious…

The Register: Lock down your critical infrastructure, CISA begs admins

Aug 14, 2025

—

by

Source URL: https://www.theregister.com/2025/08/14/cisa_begs_ot_admins_to/ Source: The Register Title: Lock down your critical infrastructure, CISA begs admins Feedly Summary: The agency offered some tips for operational technology environments, where attacks are rising CISA is urging companies with operational technology environments to set a better cybersecurity posture, and not just by adopting some new best practices and purchasing…

Cloud Blog: Cloud CISO Perspectives: New Threat Horizons details evolving risks — and defenses

Aug 14, 2025

—

by

Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-new-threat-horizons-details-evolving-risks-and-defenses/ Source: Cloud Blog Title: Cloud CISO Perspectives: New Threat Horizons details evolving risks — and defenses Feedly Summary: Welcome to the first Cloud CISO Perspectives for August 2025. Today, our Office of the CISO’s Bob Mechler and Anton Chuvakin dive into the key trends and evolving threats that we tracked in our…

The Register: Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts

Aug 13, 2025

—

by

Source URL: https://www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/ Source: The Register Title: Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts Feedly Summary: If there’s smoke? Fortinet warned customers about a critical FortiSIEM bug that could allow an unauthenticated attacker to execute unauthorized commands, and said working exploit code for the flaw has been found in…

Cisco Talos Blog: Malvertising campaign leads to PS1Bot, a multi-stage malware framework

Aug 12, 2025

—

by

Source URL: https://blog.talosintelligence.com/ps1bot-malvertising-campaign/ Source: Cisco Talos Blog Title: Malvertising campaign leads to PS1Bot, a multi-stage malware framework Feedly Summary: Cisco Talos has observed an ongoing malware campaign that seeks to infect victims with a multi-stage malware framework, implemented in PowerShell and C#, which we are referring to as “PS1Bot.” AI Summary and Description: Yes **Summary:**…

Microsoft Security Blog: Dow’s 125-year legacy: Innovating with AI to secure a long future

Aug 12, 2025

—

by