ai-security · 10 min
On 22 October, Anthropic ships Claude 3.5 Sonnet (new) with OS-control capability via screenshots. Two days later, Johann Rehberger publishes the first public PoC: a web page indirect-injects the agent into downloading and running a Sliver implant. Confused deputy at the operating-system level.
· Manuel López Pérez
compliance · 10 min
On 17 October 2024 the deadline to transpose Directive (EU) 2022/2555 expires. Spain reaches it without an approved law and without a draft bill cleared by the Council of Ministers. What is known about the national calendar, what obligations apply in the meantime via ENS and NIS1, and where the gaps are.
· Manuel López Pérez
news · 9 min
The month Salt Typhoon stopped being hypothetical. OpenAI debuts o1, the FBI dismantles the Flax Typhoon botnet, Cisco Smart Licensing turns up with hardcoded credentials, 23andMe pays 30 million for the 2023 breach, and a supplier puts explosives inside Hezbollah's pagers.
· Manuel López Pérez
ai-security · 14 min
On 12 September, OpenAI ships o1-preview with an RL-trained chain of thought hidden from the user. By the next day there are screenshots showing how to inject instructions into that chain. What changes when an intermediate channel appears that the attacker can't see and the defender doesn't log.
· Manuel López Pérez
news · 8 min
EU AI Act in force on 1 August. PKfail exposes test PKs in production. National Public Data confirms 2.9B exposed records. Black Hat brings Windows Downdate and the wormable CVE-2024-38063; DEF CON 32 brings AMD Sinkclose. Halliburton down due to RansomHub.
· Manuel López Pérez
tutorials · 10 min
On 25 July, Binarly publishes the result of auditing the firmware of ~900 devices: hundreds use AMI/Insyde test keys with the string "DO NOT TRUST" in the subject, and the private half is on GitHub. CVE-2024-8105, VU#455367, Secure Boot bypass by design.
· Manuel López Pérez
compliance · 11 min
On 1 August the AI Act enters into force after OJEU publication on 12 July. Application is staggered: Art. 5 prohibitions at 6 months, GPAI at 12, high-risk Annex III at 24, Annex I products at 36. What a CISO/DPO needs to put in motion now.
· Manuel López Pérez
news · 10 min
Dense month. regreSSHion opens the month with a big headline and moderate exploitability. On the 12th the AI Act lands in the OJEU and AT&T notifies 110M records linked to Snowflake. On the 19th, CrowdStrike ships Channel File 291 and drops 8.5M Windows machines. ESXi CVE-2024-37085 already being abused by ransomware. ServiceNow, Authy, Disney/NullBulge, Mistral NeMo.
· Manuel López Pérez
tutorials · 9 min
On 19 July 2024 at 04:09 UTC, a content update from CrowdStrike Falcon puts 8.5 million Windows machines into a reboot loop. Delta cancels 7,000 flights. The bug: a kernel-mode parser that reads field 21 of a template instance that only carries 20. How we got there, why the validator let it through, and what changes in EDR from here.
· Manuel López Pérez
tutorials · 9 min
On 1 July Qualys publishes a race condition in the OpenSSH signal handler that reintroduces a bug patched in 2006. Pre-auth RCE as root sounds apocalyptic. The fine print (glibc, x86, 10,000 connections, 6-8 hours of race window) brings the news back to its real size.
· Manuel López Pérez
news · 9 min
Mandiant publishes the UNC5537 report — 165 Snowflake accounts compromised via infostealers. Polyfill.io turns out to have been bought by Funnull and serving malware since February. CDK Global pays $25M to BlackSuit after halting 15,000 dealerships. APT29 inside TeamViewer. Apple presents Private Cloud Compute at WWDC and Anthropic ships Claude 3.5 Sonnet.
· Manuel López Pérez
tutorials · 11 min
Mandiant publishes the UNC5537 report on 10 June. Snowflake credentials stolen by infostealers between 2020 and 2024, accounts with no MFA and no network policy, mass exfil via COPY INTO. No CVE: just lax defaults and credentials nobody rotated.
· Manuel López Pérez
