news · 10 min
Recall is announced on the 20th and dismantled on the 30th. Ticketmaster and Santander join the Snowflake victim list. Dell loses 49M records to an API with no rate limit. Patch Tuesday with two zero-days. GPT-4o and the "Sky" voice that sounded like Johansson.
· Manuel López Pérez
news · 10 min
Anthropic publishes many-shot jailbreaking on the 2nd. Palo Alto GlobalProtect drops as a zero-day on the 12th. MITRE admits a breach via Ivanti on the 19th. Cisco ASA + ArcaneDoor on the 24th. Meta releases Llama 3. Sisense forces a mass reset. LayerSlider pre-auth SQLi.
· Manuel López Pérez
news · 9 min
AT&T confirms a 73M record leak. Apple patches iOS CVE-2024-23225 exploited in the wild. Microsoft ships two critical Hyper-V bugs. Anthropic launches Claude 3. The European Parliament approves the AI Act. Cloudflare admits the Thanksgiving breach. And the last week closes with XZ.
· Manuel López Pérez
news · 10 min
ConnectWise ScreenConnect CVSS 10.0 from adding a trailing slash to a URL. Volt Typhoon has been inside US critical infra for five years. Operation Cronos takes down LockBit. AnyDesk loses its signing certs. BlackCat downs ChangeHealthcare. And ArtPrompt shows that safety classifiers don't read ASCII art.
· Manuel López Pérez
news · 7 min
Ivanti Connect Secure pre-auth RCE in active mass exploitation. GitLab CVE-2023-7028 with CVSS 10. SEC and Mandiant lose their X accounts to SIM swap. Microsoft finds Midnight Blizzard had been in its mailboxes for a month. Anthropic publishes Sleeper Agents.
· Manuel López Pérez
news · 5 min
EU AI Act reaches political agreement after a 38-hour trilogue. Comcast Xfinity notifies 35.7M accounts via Citrix Bleed. BlackCat suffers a law-enforcement operation. Sleeper agents paper in preprint. Year retrospective.
· Manuel López Pérez
news · 5 min
OpenAI DevDay announces GPTs and Assistants API; Sam Altman is fired and reinstated in five days. SysAid CVE-2023-47246. LockBit exploits Citrix Bleed against Boeing and ICBC. Anthropic foreshadows sleeper agents.
· Manuel López Pérez
news · 5 min
Citrix Bleed takes authenticated sessions, bypassing MFA. Cisco IOS XE falls at scale. Okta support leaks HAR files that grant access to 1Password and Cloudflare. Curl CVE-2023-38545 plenty of hype, little impact. And Atlassian Confluence continues.
· Manuel López Pérez
news · 5 min
ChatGPT ships DALL-E 3 and voice, MGM and Caesars fall to social engineering, Microsoft IT account leak exposes 38 TB internal data. Storm-0558 keeps producing reading. AI agents in product and red-teaming on the table.
· Manuel López Pérez
news · 4 min
OWASP publishes the LLM Top 10 v1.0. DEF CON 31 dedicates the AI Village to model red-teaming. TETRA:BURST exposes 5 vulns in the TETRA radio standard. Ivanti Sentry pre-auth RCE. Meanwhile, MOVEit goes past 700 victims.
· Manuel López Pérez
news · 5 min
GCG suffix from Zou et al. automates jailbreaking. Storm-0558 stole a Microsoft signing key and read US government email. EU AI Act published in OJEU. Citrix NetScaler CVE-2023-3519 exploited in the wild.
· Manuel López Pérez
news · 4 min
MOVEit changes everything: Cl0p turns a SQLi zero-day into a campaign that ends with 2,700+ affected organisations. Meanwhile, Fortinet, VMware Aria, and the first LLM agents in production.
· Manuel López Pérez
