Experimental News Clipping Site

Tag: vulnerability

  • Cloud Blog: Announcing Claude Sonnet 4.5 on Vertex AI

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/ai-machine-learning/announcing-claude-sonnet-4-5-on-vertex-ai/ Source: Cloud Blog Title: Announcing Claude Sonnet 4.5 on Vertex AI Feedly Summary: Today, we’re announcing the general availability of Claude Sonnet 4.5, Anthropic’s most intelligent model and its best-performing model for complex agents, coding, and computer use, on Vertex AI.Claude Sonnet 4.5 is built to work independently for hours, maintaining clarity…

  • Schneier on Security: Abusing Notion’s AI Agent for Data Theft

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/09/abusing-notions-ai-agent-for-data-theft.html Source: Schneier on Security Title: Abusing Notion’s AI Agent for Data Theft Feedly Summary: Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson’s lethal trifecta, it’s vulnerable to data theft though prompt injection. First, the trifecta: The lethal trifecta of capabilities is: Access to your private…

  • Wired: Tile Tracking Tags Can Be Exploited by Tech-Savvy Stalkers, Researchers Say

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/tile-tracking-tags-can-be-exploited-by-tech-savvy-stalkers-researchers-say/ Source: Wired Title: Tile Tracking Tags Can Be Exploited by Tech-Savvy Stalkers, Researchers Say Feedly Summary: A team of researchers found that, by not encrypting the data broadcast by Tile tags, users could be vulnerable to having their location information exposed to malicious actors. AI Summary and Description: Yes Summary: The text…

  • Unit 42: Threat Insights: Active Exploitation of Cisco ASA Zero Days

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/zero-day-vulnerabilities-affect-cisco-software/ Source: Unit 42 Title: Threat Insights: Active Exploitation of Cisco ASA Zero Days Feedly Summary: CVE-2025-20333, CVE-2025-20362 and CVE-2025-20363 affect multiple Cisco products, and are being exploited by a threat actor linked to the ArcaneDoor campaign. The post Threat Insights: Active Exploitation of Cisco ASA Zero Days appeared first on Unit 42.…

  • The Register: ‘An attacker’s playground:’ Crims exploit GoAnywhere perfect-10 bug

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/26/an_apts_playground_goanywhere_perfect10/ Source: The Register Title: ‘An attacker’s playground:’ Crims exploit GoAnywhere perfect-10 bug Feedly Summary: Researchers say tens of thousands of instances remain publicly reachable Security researchers have confirmed that threat actors have exploited the maximum-severity vulnerability affecting Fortra’s GoAnywhere managed file transfer (MFT), and chastised the vendor for a lack of transparency.……

  • The Register: Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/26/salesforce_agentforce_forceleak_attack/ Source: The Register Title: Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales Feedly Summary: More fun with AI agents and their security holes A now-fixed flaw in Salesforce’s Agentforce could have allowed external attackers to steal sensitive customer data via prompt injection, according to security researchers…

  • Anchore: Hardened Images are Here to Stay

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/hardened-images-are-here-to-stay/ Source: Anchore Title: Hardened Images are Here to Stay Feedly Summary: Lately it seems like a new company building hardened container images is popping up every other day. What’s the deal with this, why the sudden influx of hardened images?  A previous blog article titled “Navigating the New Compliance Frontier” discussed some…

  • The Register: Zero-day deja vu as another Cisco IOS bug comes under attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/25/zeroday_deja_vu_another_cisco/ Source: The Register Title: Zero-day deja vu as another Cisco IOS bug comes under attack Feedly Summary: The latest in a run of serious networking bugs gives attackers root if they have SNMP access Cisco has confirmed a new IOS and IOS XE zero-day, the latest in a string of flaws that…