Experimental News Clipping Site

Tag: uth

  • The Register: ‘An attacker’s playground:’ Crims exploit GoAnywhere perfect-10 bug

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/26/an_apts_playground_goanywhere_perfect10/ Source: The Register Title: ‘An attacker’s playground:’ Crims exploit GoAnywhere perfect-10 bug Feedly Summary: Researchers say tens of thousands of instances remain publicly reachable Security researchers have confirmed that threat actors have exploited the maximum-severity vulnerability affecting Fortra’s GoAnywhere managed file transfer (MFT), and chastised the vendor for a lack of transparency.……

  • Docker: The Trust Paradox: When Your AI Gets Catfished

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/mcp-prompt-injection-trust-paradox/ Source: Docker Title: The Trust Paradox: When Your AI Gets Catfished Feedly Summary: The fundamental challenge with MCP-enabled attacks isn’t technical sophistication. It’s that hackers have figured out how to catfish your AI. These attacks work because they exploit the same trust relationships that make your development team actually functional. When your…

  • The Register: Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/26/salesforce_agentforce_forceleak_attack/ Source: The Register Title: Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales Feedly Summary: More fun with AI agents and their security holes A now-fixed flaw in Salesforce’s Agentforce could have allowed external attackers to steal sensitive customer data via prompt injection, according to security researchers…

  • Schneier on Security: Digital Threat Modeling Under Authoritarianism

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/09/digital-threat-modeling-under-authoritarianism.html Source: Schneier on Security Title: Digital Threat Modeling Under Authoritarianism Feedly Summary: Today’s world requires us to make complex and nuanced decisions about our digital security. Evaluating when to use a secure messaging app like Signal or WhatsApp, which passwords to store on your smartphone, or what to share on social media…

  • Cisco Talos Blog: Great Scott, I’m tired

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/great-scott-im-tired/ Source: Cisco Talos Blog Title: Great Scott, I’m tired Feedly Summary: Hazel celebrates unseen effort in cybersecurity and shares some PII. Completely unrelated, but did you know “Back to the Future” turns 40 this year? AI Summary and Description: Yes Summary: The content primarily discusses recent cybersecurity threats, including the emergence of…

  • The Cloudflare Blog: Choice: the path to AI sovereignty

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/sovereign-ai-and-choice/ Source: The Cloudflare Blog Title: Choice: the path to AI sovereignty Feedly Summary: Championing AI sovereignty through choice: diverse tools, data control, and no vendor lock-in. We’re enabling this in India, Japan, and Southeast Asia, offering local, open-source models on Workers AI AI Summary and Description: Yes Summary: The text discusses the…