news · 4 min
OWASP publishes the LLM Top 10 v1.0. DEF CON 31 dedicates the AI Village to model red-teaming. TETRA:BURST exposes 5 vulns in the TETRA radio standard. Ivanti Sentry pre-auth RCE. Meanwhile, MOVEit goes past 700 victims.
· Manuel López Pérez
news · 5 min
GCG suffix from Zou et al. automates jailbreaking. Storm-0558 stole a Microsoft signing key and read US government email. EU AI Act published in OJEU. Citrix NetScaler CVE-2023-3519 exploited in the wild.
· Manuel López Pérez
news · 4 min
MOVEit changes everything: Cl0p turns a SQLi zero-day into a campaign that ends with 2,700+ affected organisations. Meanwhile, Fortinet, VMware Aria, and the first LLM agents in production.
· Manuel López Pérez
news · 4 min
Barracuda ESG compromised for 7 months by UNC4841, Microsoft Build sells Copilot for everything, Operation Triangulation reveals an iOS implant. May brings geopolitics in the background and AI security turns into product marketing.
· Manuel López Pérez
news · 7 min
Markdown exfil moves out of the forum and into serious advisories. MSI Gaming leaks Intel Boot Guard signing keys. QueueJumper in MSMQ. Anthropic opens the Claude API. Meanwhile, Cl0p keeps adding victims.
· Manuel López Pérez
news · 4 min
Outlook NTLM zero-click patched after a year of APT28 exploitation, 3CX supply-chain compromise with Lazarus DLL sideloading, GPT-4 released and broken within 24 hours. March closes Q1 with two long stories.
· Manuel López Pérez
news · 5 min
Sydney leaked, Greshake formalises indirect prompt injection, Cl0p turns GoAnywhere into a global campaign, and ESXiArgs sweeps unpatched VMware ESXi. February opens two fronts at once.
· Manuel López Pérez
news · 6 min
BOLDMOVE on FortiOS attributed to a China-nexus actor, ALPC zero-day in Patch Tuesday, MFA seeds stolen from GoTo, NIS2 enters into force, and the first generation of ChatGPT jailbreaks. What moved in January, ranked by real impact.
· Manuel López Pérez
news · 1 min
Critical analysis of RustScan, the tool that promised to scan ports much faster than Nmap. Is it truly revolutionary or just an aggressive wrapper? Real comparison with advanced Nmap configurations that achieve more accurate and faster results.
· Manuel López Pérez
