Claroty researchers have uncovered four vulnerabilities in a proprietary protocol used by surveillance equipment manufacturer Axis Communications
According to Infoblox’s new report, the VexTrio cybercrime-enabling network originates from Italy and Eastern Europe
Le bijoutier Pandora victime d’une fuite de données personnelles
La société danoise a averti ses clients d’une cyberattaque survenue via la plateforme d’un tiers. Elle explique que les noms, dates de naissance et adresses e-mail sont les seules catégories de données personnelles dérobées et qu’aucu...
The incident, reported to be ransomware-related, has resulted in attackers stealing sensitive personal and clinical data, including lab test results
GenAI company OpenAI has launched its first-ever open-weight models alongside a red teaming challenge
Today we cover Devin AI from Cognition, the first AI Software Engineer.
We will cover Devin proof-of-concept exploits in multiple posts over the next few days. In this first post, we show how a prompt injection payload hosted on a website leads to a full compromise of Devin’s DevBox.
GitHub Issue To...
A Nigerian man accused of hacking, fraud and identity theft has been extradited from France to the US to face charges
During the pre-Black Hat AI Summit, Sean Morgan, Protect AI’s Chief Architect, highlighted the three most prominent security risks of using AI agents
Acknowledgement added. This is an informational change only.
Adversaries are prioritizing stealth over scale, according to OPSWAT’s latest Threat Landscape Report
Trend Micro has released a temporary fix for the flaws, which enable remote code execution on on-prem Apex One machines
This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.
Ransomware actors deploy a range of activities to make it harder for victims to recover and increase the consequences of not paying demands
The UK’s National Cyber Security Centre has released the Cyber Assessment Framework 4.0
This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.
Chanel and Pandora have revealed data breaches reportedly linked to attacks on their Salesforce instances
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5.
Prompt injection pervades discussions about security for LLMs and AI agents. But there is little public information on how to write powerful, discreet, and reliable prompt injection exploits. In this post, we will design and implement a prompt injection exploit targeting GitHub’s Copilot Agent, with...
This vulnerability allows remote attackers to disclose sensitive information or create a denial-of-service condition on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1.