Experimental News Clipping Site

Tag: updates

  • The Register: Mitel 0-day, 5-year-old Oracle RCE bugs under active exploit

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/08/mitel_0_day_oracle_rce_under_exploit/ Source: The Register Title: Mitel 0-day, 5-year-old Oracle RCE bugs under active exploit Feedly Summary: 3 CVEs added to CISA’s catalog Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a zero-day flaw, alongside a critical remote code execution vulnerability in Oracle WebLogic Server that has been exploited for at least…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/07/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability Users and administrators are also encouraged to…

  • Embrace The Red: AI Domination: Remote Controlling ChatGPT ZombAI Instances

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/spaiware-and-chatgpt-command-and-control-via-prompt-injection-zombai/ Source: Embrace The Red Title: AI Domination: Remote Controlling ChatGPT ZombAI Instances Feedly Summary: At Black Hat Europe I did a fun presentation titled SpAIware and More: Advanced Prompt Injection Exploits. Without diving into the details of the entire talk, the key point I was making is that prompt injection can impact…

  • Cloud Blog: Toward faster incident resolution at Palo Alto Networks with Personalized Service Health

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/management-tools/personalized-service-health-at-palo-alto-networks/ Source: Cloud Blog Title: Toward faster incident resolution at Palo Alto Networks with Personalized Service Health Feedly Summary: Cloud incidents happen. And when they do, it’s incumbent on the cloud service provider to communicate about the incident to impacted customers quickly and effectively — and for the cloud service consumer to use…

  • The Register: FireScam infostealer poses as Telegram Premium app to surveil Android devices

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/01/06/firescam_android_malware/ Source: The Register Title: FireScam infostealer poses as Telegram Premium app to surveil Android devices Feedly Summary: Once installed, it helps itself to your data like it’s a free buffet Android malware dubbed FireScam tricks people into thinking they are downloading a Telegram Premium application that stealthily monitors victims’ notifications, text messages,…

  • The Register: Telemetry data from 800K VW Group EVs exposed online

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2025/01/06/volkswagen_ev_data_exposed/ Source: The Register Title: Telemetry data from 800K VW Group EVs exposed online Feedly Summary: PLUS: DoJ bans data sale to enemy nations; Do Kwon extradited to US; Tenable CEO passes away; and more Infosec in Brief Welcome to 2025: hopefully you enjoyed a pleasant holiday season and returned to the security…

  • Hacker News: What we learned copying all the best code assistants

    —

    by

    system automation
    in

    Source URL: https://blog.val.town/blog/fast-follow/ Source: Hacker News Title: What we learned copying all the best code assistants Feedly Summary: Comments AI Summary and Description: Yes Summary: This text provides a historical overview of Val Town’s journey in developing LLM-driven code generation tools, highlighting innovations and challenges faced in the evolving landscape of AI-powered coding assistants. It…

  • Slashdot: Hackers Target Dozens of VPN, AI Extensions For Google Chrome To Compromise Data

    —

    by

    system automation
    in

    Source URL: https://it.slashdot.org/story/25/01/02/2157246/hackers-target-dozens-of-vpn-ai-extensions-for-google-chrome-to-compromise-data Source: Slashdot Title: Hackers Target Dozens of VPN, AI Extensions For Google Chrome To Compromise Data Feedly Summary: AI Summary and Description: Yes Summary: The text discusses serious security concerns related to malicious updates of Chrome browser extensions, especially those connected with artificial intelligence tools and VPNs. It emphasizes the risks of…

  • Embrace The Red: Microsoft 365 Copilot Generated Images Accessible Without Authentication — Fixed!

    —

    by

    system automation
    in

    Source URL: https://embracethered.com/blog/posts/2025/m365-copilot-image-generation-without-authentication/ Source: Embrace The Red Title: Microsoft 365 Copilot Generated Images Accessible Without Authentication — Fixed! Feedly Summary: I regularly look at how the system prompts of chatbots change over time. Updates frequently highlight new features being added, design changes that occur and potential areas that might benefit from more security scrutiny. A…