Experimental News Clipping Site

Tag: vulnerability

  • Wired: Hackers Are Finding New Ways to Hide Malware in DNS Records

    —

    by

    Kurt Seifried
    in

    Source URL: https://arstechnica.com/security/2025/07/hackers-exploit-a-blind-spot-by-hiding-malware-inside-dns-records/ Source: Wired Title: Hackers Are Finding New Ways to Hide Malware in DNS Records Feedly Summary: Newly published research shows that the domain name system—a fundamental part of the web—can be exploited to hide malicious code and prompt injection attacks against chatbots. AI Summary and Description: Yes Summary: The text discusses the…

  • Microsoft Security Blog: Protecting customers from Octo Tempest attacks across multiple industries

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/07/16/protecting-customers-from-octo-tempest-attacks-across-multiple-industries/ Source: Microsoft Security Blog Title: Protecting customers from Octo Tempest attacks across multiple industries Feedly Summary: To help protect and inform customers, Microsoft highlights protection coverage across the Microsoft Defender security ecosystem to protect against threat actors like Octo Tempest. The post Protecting customers from Octo Tempest attacks across multiple industries appeared…

  • CSA: Copilot Studio: AIjacking Leads to Data Exfiltration

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/a-copilot-studio-story-2-when-aijacking-leads-to-full-data-exfiltration Source: CSA Title: Copilot Studio: AIjacking Leads to Data Exfiltration Feedly Summary: AI Summary and Description: Yes Summary: The text discusses significant vulnerabilities in AI agents, particularly focusing on prompt injection attacks that led to unauthorized access and exfiltration of sensitive data. It provides a case study involving a customer service agent…

  • Krebs on Security: DOGE Denizen Marko Elez Leaked API Key for xAI

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/07/doge-denizen-marko-elez-leaked-api-key-for-xai/ Source: Krebs on Security Title: DOGE Denizen Marko Elez Leaked API Key for xAI Feedly Summary: Marko Elez, a 25-year-old employee at Elon Musk’s Department of Government Efficiency (DOGE), has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice departments, and the Department of Homeland…

  • The Register: Nvidia A6000 GPUs flip memory bits if beaten by GPUHammer

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/14/nvidia_a6000_gpu_gpuhammer/ Source: The Register Title: Nvidia A6000 GPUs flip memory bits if beaten by GPUHammer Feedly Summary: Rowhammer returns for more memory-meddling fun The Rowhammer attack on computer memory is back, and for the first time, it’s able to mess with bits in Nvidia GPUs, despite defenses designed to protect against this kind…

  • The Register: Nvidia warns its GPUs – even Blackwells – need protection against Rowhammer attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/13/infosec_in_brief/ Source: The Register Title: Nvidia warns its GPUs – even Blackwells – need protection against Rowhammer attacks Feedly Summary: PLUS: Bluetooth mess leaves cars exposed; Bitcoin ATMs attacked; Deepfakers imitate US secretary of state Marco Rubio; and more Infosec In Brief Nvidia last week advised customers to ensure they employ mitigations against…

  • Slashdot: NVIDIA Warns Its High-End GPUs May Be Vulnerable to Rowhammer Attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://hardware.slashdot.org/story/25/07/12/199238/nvidia-warns-its-high-end-gpus-may-be-vulnerable-to-rowhammer-attacks Source: Slashdot Title: NVIDIA Warns Its High-End GPUs May Be Vulnerable to Rowhammer Attacks Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a new security notice from NVIDIA regarding vulnerabilities in GDDR6 memory on high-end GPUs due to Rowhammer attacks, showcasing the critical need for enabling Error Correction Code…

  • The Register: CVSS 10 RCE in Wing FTP exploited within 24 hours, security researchers warn

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/11/1010_wing_ftp_bug_exploited/ Source: The Register Title: CVSS 10 RCE in Wing FTP exploited within 24 hours, security researchers warn Feedly Summary: Intruders looked up how to use curl mid-attack – rookie errors kept damage minimal Huntress security researchers observed exploitation of the CVSS 10.0 remote code execution (RCE) flaw in Wing FTP Server on…