AI Malware Is Here: New Report Shows How Fake AI Tools Are Spreading Ransomware(blog.talosintelligence.com)

36 points by karlperera 1 year ago | 16 comments

Cairn: Open windows into AI-driven cyber operations(norforge.com)

26 points by ragu4u 14 days ago | 8 comments

A Norforge blog post analyzing more than 20 exposed Cairn panels that reveal how threat actors use autonomous AI agents to select targets, exploit vulnerabilities, and persist.

GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

PixieFail: Nine Vulnerabilities UEFI Implementations(blog.quarkslab.com)

141 points by weinzierl 2 years ago | 82 comments

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)

227 points by cubefox 11 days ago | 98 comments

AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.

Hackers stole access tokens from Okta's support unit(krebsonsecurity.com)

279 points by todsacerdoti 3 years ago | 137 comments

Claude Cowork exfiltrates files(promptarmor.com)

827 points by takira 9 months ago | 366 comments

PromptArmor threat intelligence report showing Claude Cowork is vulnerable to file exfiltration via indirect prompt injection due to code execution isolation flaws.

My minute-by-minute response to the LiteLLM malware attack(futuresearch.ai)

415 points by Fibonar 7 months ago | 153 comments

A FutureSearch engineer's blog post with the Claude Code transcript of discovering the compromised LiteLLM PyPI release and getting it quarantined.

I could've accessed 17T Microsoft records(blog.faav.net)

287 points by luispa 1 month ago | 120 comments

A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.

Microsoft technical breakdown of CrowdStrike incident(microsoft.com)

318 points by nar001 2 years ago | 304 comments

Microsoft Security blog post by David Weston on Windows security best practices for integrating security tools, including a technical analysis of the CrowdStrike outage.

Humiliating IIS servers for fun and jail time(mll.sh)

338 points by denysvitali 4 months ago | 82 comments

A blog post on finding and exploiting common misconfigurations in Microsoft IIS web servers, starting from the default IIS splash page.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.