Experimental News Clipping Site

Tag: vigilance

  • Cisco Talos Blog: Velociraptor leveraged in ransomware attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/velociraptor-leveraged-in-ransomware-attacks/ Source: Cisco Talos Blog Title: Velociraptor leveraged in ransomware attacks Feedly Summary: Cisco Talos has confirmed that ransomware operators are leveraging Velociraptor, an open-source digital forensics and incident response (DFIR) tool that had not previously been definitively tied to ransomware incidents.  We assess with moderate confidence that this activity can be attributed to…

  • Slashdot: Salesforce Says It Won’t Pay Extortion Demand in 1 Billion Records Breach

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/10/08/208202/salesforce-says-it-wont-pay-extortion-demand-in-1-billion-records-breach?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Salesforce Says It Won’t Pay Extortion Demand in 1 Billion Records Breach Feedly Summary: AI Summary and Description: Yes Summary: Salesforce is facing an extortion demand from a crime syndicate that claims to have stolen approximately 1 billion records from various customers, highlighting vulnerabilities in user compliance and security…

  • The Register: Microsoft blames Medusa ransomware affiliates for GoAnywhere exploits while Fortra keeps head buried

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/06/microsoft_blames_medusa_ransomware_affiliates/ Source: The Register Title: Microsoft blames Medusa ransomware affiliates for GoAnywhere exploits while Fortra keeps head buried Feedly Summary: You can’t find anything bad if you don’t look, right? Medusa ransomware affiliates are among those exploiting a maximum-severity bug in Fortra’s GoAnywhere managed file transfer (MFT) product, according to Microsoft Threat Intelligence.……

  • The Register: Level-10 vuln lurking in Redis source code for 13 years could allow remote code execution

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/06/perfect_10_redis_rce_lurking/ Source: The Register Title: Level-10 vuln lurking in Redis source code for 13 years could allow remote code execution Feedly Summary: No evidence of exploitation … yet A 13-year-old critical flaw in Redis servers, rated a perfect 10 out of 10 in severity, can let an authenticated user trigger remote code execution.……

  • The Register: Red Hat fesses up to GitLab breach after attackers brag of data theft

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/03/red_hat_gitlab_breach/ Source: The Register Title: Red Hat fesses up to GitLab breach after attackers brag of data theft Feedly Summary: Open source giant admits intruders broke into dedicated consulting instance, but insists core products untouched What started as cyber crew bragging has now been confirmed by Red Hat: someone gained access to its…

  • Simon Willison’s Weblog: Sora 2 prompt injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Oct/3/cameo-prompt-injections/ Source: Simon Willison’s Weblog Title: Sora 2 prompt injection Feedly Summary: It turns out Sora 2 is vulnerable to prompt injection! When you onboard to Sora you get the option to create your own “cameo" – a virtual video recreation of yourself. Here’s mine singing opera at the Royal Albert Hall. You…

  • Slashdot: Google Says Hackers Are Sending Extortion Emails To Executives

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/10/02/1812256/google-says-hackers-are-sending-extortion-emails-to-executives?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Says Hackers Are Sending Extortion Emails To Executives Feedly Summary: AI Summary and Description: Yes Summary: Google has reported that hackers associated with the ransomware group cl0p are sending extortion emails to executives, threatening the release of stolen sensitive data from Oracle business applications. The authenticity of these…

  • Cisco Talos Blog: Family group chats: Your (very last) line of cyber defense

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/family-group-chats-your-very-last-line-of-cyber-defense/ Source: Cisco Talos Blog Title: Family group chats: Your (very last) line of cyber defense Feedly Summary: Amy gives an homage to parents in family group chats everywhere who want their children to stay safe in this wild world. AI Summary and Description: Yes Summary: This text provides insights into current cybersecurity…

  • The Register: Subpoena tracking platform blames outage on AWS social engineering attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/02/subpoena_tracking_platform_outage_blamed/ Source: The Register Title: Subpoena tracking platform blames outage on AWS social engineering attack Feedly Summary: Software maker Kodex said its domain registrar fell for a fraudulent legal order A software platform used by law enforcement agencies and major tech companies to manage subpoenas and data requests went dark this week after…