Tag: threat

Source URL: https://unit42.paloaltonetworks.com/badsuccessor-attack-vector/ Source: Unit 42 Title: When Good Accounts Go Bad: Exploiting Delegated Managed Service Accounts in Active Directory Feedly Summary: BadSuccessor is an attack vector in Windows Server 2025. Under certain conditions it allows privilege elevation via dMSAs. We analyze its mechanics. The post When Good Accounts Go Bad: Exploiting Delegated Managed Service…

NCSC Feed: Cyber Assessment Framework v4.0 released in response to growing threat

Aug 6, 2025

—

by

Source URL: https://www.ncsc.gov.uk/blog-post/caf-v4-0-released-in-respeonse-to-growing-threat Source: NCSC Feed Title: Cyber Assessment Framework v4.0 released in response to growing threat Feedly Summary: Updates to the CAF helps providers of essential services to better manage their cyber risks. AI Summary and Description: Yes Summary: The provided text addresses updates to the Cyber Assurance Framework (CAF), which is crucial for…

The Register: Vibe coding tool Cursor’s MCP implementation allows persistent code execution

—

by

Source URL: https://www.theregister.com/2025/08/05/mcpoison_bug_abuses_cursor_mcp/ Source: The Register Title: Vibe coding tool Cursor’s MCP implementation allows persistent code execution Feedly Summary: More evidence that AI expands the attack surface Check Point researchers uncovered a remote code execution bug in popular vibe-coding AI tool Cursor that could allow an attacker to poison developer environments by secretly modifying a…

The Register: Three US agencies get failing grades for not following IT best practices

—

by

Source URL: https://www.theregister.com/2025/08/05/epa_dhs_gsa_get_failing_grades/ Source: The Register Title: Three US agencies get failing grades for not following IT best practices Feedly Summary: CIOs at the EPA, DHS, and GSA are called out for failure to implement critical cybersecurity recommendations The Government Accountability Office (GAO) scolded a trio of federal agencies on Monday because their CIOs haven’t…

OpenAI : Estimating worst case frontier risks of open weight LLMs

—

by

Source URL: https://openai.com/index/estimating-worst-case-frontier-risks-of-open-weight-llms Source: OpenAI Title: Estimating worst case frontier risks of open weight LLMs Feedly Summary: In this paper, we study the worst-case frontier risks of releasing gpt-oss. We introduce malicious fine-tuning (MFT), where we attempt to elicit maximum capabilities by fine-tuning gpt-oss to be as capable as possible in two domains: biology and…

Microsoft Security Blog: Elevate your protection with expanded Microsoft Defender Experts coverage

—

by

Source URL: https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/elevate-your-protection-with-expanded-microsoft-defender-experts-coverage/4439134 Source: Microsoft Security Blog Title: Elevate your protection with expanded Microsoft Defender Experts coverage Feedly Summary: Defender Experts now offers 24/7, expert-driven protection for cloud workloads, beginning with hybrid and multicloud servers in Microsoft Defender for Cloud. Additionally, third-party network signals can be used in Microsoft Defender Experts for XDR to enhance…

Embrace The Red: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed

—

by

Source URL: https://embracethered.com/blog/posts/2025/amp-agents-that-modify-system-configuration-and-escape/ Source: Embrace The Red Title: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed Feedly Summary: Sandbox-escape-style attacks can happen when an AI is able to modify its own configuration settings, such as by writing to configuration files. That was the case with Amp, an agentic coding tool built by Sourcegraph. The…

Cisco Talos Blog: ReVault! When your SoC turns against you…

—

by

Source URL: https://blog.talosintelligence.com/revault-when-your-soc-turns-against-you/ Source: Cisco Talos Blog Title: ReVault! When your SoC turns against you… Feedly Summary: Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”. AI Summary and Description: Yes **Summary:** The report details significant vulnerabilities discovered in Dell’s ControlVault3…

The Register: TSMC launches legal action against insiders accused of trade secret theft

—

by