news · 5 min
Citrix Bleed takes authenticated sessions, bypassing MFA. Cisco IOS XE falls at scale. Okta support leaks HAR files that grant access to 1Password and Cloudflare. Curl CVE-2023-38545 plenty of hype, little impact. And Atlassian Confluence continues.
· Manuel López Pérez
tutorials · 8 min
CVE-2023-4966 lets you read ~63 KB of NetScaler memory with a single HTTP request carrying an oversized Host header. Among the data: active session tokens. The attacker replays them and walks in as a valid user — no MFA. Boeing, ICBC, Comcast and more fall between October and November.
· Manuel López Pérez
news · 5 min
ChatGPT ships DALL-E 3 and voice, MGM and Caesars fall to social engineering, Microsoft IT account leak exposes 38 TB internal data. Storm-0558 keeps producing reading. AI agents in product and red-teaming on the table.
· Manuel López Pérez
ai-security · 6 min
The user asks the agent to summarise a URL. The page has embedded instructions that trigger another tool — send_email — with conversation data. The model complies without asking. Reproducible PoC with OpenAI function calling.
· Manuel López Pérez
news · 4 min
OWASP publishes the LLM Top 10 v1.0. DEF CON 31 dedicates the AI Village to model red-teaming. TETRA:BURST exposes 5 vulns in the TETRA radio standard. Ivanti Sentry pre-auth RCE. Meanwhile, MOVEit goes past 700 victims.
· Manuel López Pérez
ai-security · 5 min
On 16 August, OWASP publishes v1.0 of its Top 10 for LLM applications. The first industry framework in the field. Works as shared vocabulary; has gaps worth naming before adopting it as checklist.
· Manuel López Pérez
news · 5 min
GCG suffix from Zou et al. automates jailbreaking. Storm-0558 stole a Microsoft signing key and read US government email. EU AI Act published in OJEU. Citrix NetScaler CVE-2023-3519 exploited in the wild.
· Manuel López Pérez
ai-security · 7 min
On 27 July, Zou et al. publish a paper showing that adversarial suffixes can be generated automatically, by gradient descent, that bypass the safety classifiers of Llama-2, GPT-3.5, GPT-4, Bard and Claude. And they transfer between models.
· Manuel López Pérez
news · 4 min
MOVEit changes everything: Cl0p turns a SQLi zero-day into a campaign that ends with 2,700+ affected organisations. Meanwhile, Fortinet, VMware Aria, and the first LLM agents in production.
· Manuel López Pérez
tutorials · 8 min
CVE-2023-34362 is a pre-auth SQL injection in MOVEit Transfer that Cl0p exploits as zero-day from 27 May. The chain goes SQLi → MachineKey leak → session forge → LEMURLOOT web shell drop (human2.aspx). Result: 2,700+ organisations exposed before the year ends.
· Manuel López Pérez
news · 4 min
Barracuda ESG compromised for 7 months by UNC4841, Microsoft Build sells Copilot for everything, Operation Triangulation reveals an iOS implant. May brings geopolitics in the background and AI security turns into product marketing.
· Manuel López Pérez
tutorials · 8 min
CVE-2023-2868 is a trivial command injection in the Email Security Gateway TAR parser. UNC4841 has been exploiting it since October 2022. Barracuda does not recommend patching — it recommends throwing the device out. We reproduce the malicious filename, walk through the buggy Perl path and review the IoCs published by Mandiant.
· Manuel López Pérez
