Collecting Cyber-News from over 60 sources

Tag: injection

Safer Conversational AI for Cybersecurity: The BIX Approach

Sep 13, 2025 6:16 AM

Tags: ai, cybersecurity, injection

Here’s a scenario security teams increasingly face. A user”, or an attacker pretending to be one”, types something like: This is how many prompt injection attempts begin. The phrase looks harmless, but it’s a red flag: the user is telling the AI to forget its built”‘in rules. What follows is often hidden inside a structured…
AI Security Risks Mirror Past Application Flaws

Sep 11, 2025 7:16 PM

Tags: ai, application-security, flaw, gitlab, injection, risk, vulnerability

GitLab’s Joern Schneeweisz on Prompt Injections and Old AppSec Issues. Large language models pose systemic risks, and the rush to release AI products revives old security flaws. Prompt injections and familiar application vulnerabilities expose gaps created when speed outweighs safety, said Joern Schneeweisz, principal security engineer at GitLab. First seen on govinfosecurity.com Jump to article:…
AI prompt injection gets real, with macros the latest hidden threat

Sep 11, 2025 10:16 AM

Tags: ai, attack, ciso, control, cybersecurity, data, defense, governance, injection, intelligence, jobs, LLM, malicious, malware, microsoft, office, RedTeam, strategy, threat, tool, unauthorized, zero-trust

Jedi mind trick turned against AI-based malware scanners: The “Skynet” malware, discovered in June 2025, featured an attempted prompt injection against AI-powered security tools. The technique was designed to manipulate AI malware analysis systems into falsely declaring no malware was detected in a sample through a form of “Jedi mind trick.”Researchers at Check Point reckon…
Dell PowerProtect Data Manager Flaw Allows System Compromise by Attackers

Sep 11, 2025 8:16 AM

Tags: advisory, cyber, data, flaw, injection, update, vulnerability

Dell has released a critical security update for its PowerProtect Data Manager (PPDM) platform, addressing multiple vulnerabilities that could allow attackers to compromise systems and execute arbitrary commands. The security advisory DSA-2025-326 reveals several high-severity flaws affecting versions 19.19 and 19.20 of the enterprise data protection solution. Critical Command Injection Vulnerabilities Discovered The most severe…
New Claude Feature Turns Into a Hacker’s Playground

Sep 10, 2025 9:16 PM

Tags: attack, data, hacker, injection, tool

Anthropic’s new Claude file tool boosts productivity but exposes users to prompt injection attacks and potential data leaks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/claude-ai-file-creation-security-risks/
We’ve crossed the security singularity – Impart Security

Sep 10, 2025 6:02 PM

Tags: access, ai, api, attack, authentication, breach, ciso, compliance, credentials, cyber, cyberattack, cybersecurity, data, data-breach, defense, detection, exploit, framework, group, hacker, incident response, injection, intelligence, Internet, msp, password, penetration-testing, ransomware, risk, risk-assessment, skills, software, sql, strategy, supply-chain, threat, update, vulnerability, zero-day, zero-trust

The Bottom Line: We’ve Crossed the Security Singularity “ The Security Singularity: When AI Democratized Cyberattacks We’ve crossed a threshold that fundamentally changes cybersecurity forever. Not with fanfare or headlines, but quietly, in the background of our AI-powered world. The expertise barrier that once separated script kiddies from sophisticated threat actors has simply… vanished. I…
Lasso Platform Employs AI Agents to Secure AI Applications

Sep 10, 2025 6:02 PM

Tags: ai, blueteam, injection, PurpleTeam, service, vulnerability

Lasso has launched an agentic AI service for purple teaming that secures AI applications before and after deployment. By combining red and blue team functions with autonomous AI agents, the platform detects vulnerabilities like prompt injection and enforces security policies. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/lasso-platform-employs-ai-agents-to-secure-ai-applications/
Securing Agents Isn’t the Customer’s Job, it’s the Platform’s

Sep 10, 2025 5:16 PM

Tags: ai, data, injection, jobs

As enterprises adopt AI agents at scale, security must evolve beyond policies and human oversight. From protecting enterprise data and preventing prompt injection to enforcing permission boundaries and agent guardrails, platform providers”, not customers”, must embed security into AI systems. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/securing-agents-isnt-the-customers-job-its-the-platforms/
FortiDDoS Vulnerability Lets Hackers Execute Unauthorized OS Commands

Sep 9, 2025 6:08 PM

Tags: cvss, cyber, flaw, fortinet, hacker, injection, unauthorized, vulnerability

Fortinet has disclosed a significant OS command injection vulnerability in its FortiDDoS-F appliances that could allow privileged attackers to execute unauthorized code or commands through the command-line interface (CLI). The security flaw, identified as CVE-2024-45325, affects multiple versions of the FortiDDoS-F product line and carries a CVSS 3.1 score of 6.5, indicating medium severity. Vulnerability Details…
FortiDDoS Vulnerability Lets Hackers Execute Unauthorized OS Commands

Sep 9, 2025 6:08 PM

Tags: cvss, cyber, flaw, fortinet, hacker, injection, unauthorized, vulnerability

Fortinet has disclosed a significant OS command injection vulnerability in its FortiDDoS-F appliances that could allow privileged attackers to execute unauthorized code or commands through the command-line interface (CLI). The security flaw, identified as CVE-2024-45325, affects multiple versions of the FortiDDoS-F product line and carries a CVSS 3.1 score of 6.5, indicating medium severity. Vulnerability Details…
Best practices for securing secrets in staging environments

Sep 9, 2025 3:09 PM

Tags: best-practice, injection, tool

Discover the most common secrets management mistakes in non-prod environments and how to fix them using scoped tokens, runtime injection, and tools like Doppler. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/best-practices-for-securing-secrets-in-staging-environments/
Best practices for securing secrets in staging environments

Sep 9, 2025 3:09 PM

Tags: best-practice, injection, tool

Discover the most common secrets management mistakes in non-prod environments and how to fix them using scoped tokens, runtime injection, and tools like Doppler. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/best-practices-for-securing-secrets-in-staging-environments/
Best practices for securing secrets in staging environments

Sep 9, 2025 3:09 PM

Tags: best-practice, injection, tool

Discover the most common secrets management mistakes in non-prod environments and how to fix them using scoped tokens, runtime injection, and tools like Doppler. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/best-practices-for-securing-secrets-in-staging-environments/
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
When AI nukes your database: The dark side of vibe coding

Sep 9, 2025 2:08 PM

Tags: ai, application-security, attack, authentication, automation, ciso, computer, control, corporate, data, data-breach, defense, dos, email, flaw, governance, incident response, injection, jobs, LLM, microsoft, open-source, password, risk, saas, skills, supply-chain, threat, tool, training, zero-trust

private paths, on another instance.Worthington warns this is one of the most frequent red flags in threat intel. When vibe-coded applications reach incident response, she says, “You’ll often see absence of logging, lack of source control, or weak authentication alongside hardcoded secrets. Rather than a single fingerprint, it’s a collection of sloppy behaviors that point…
ISMG Editors: Nullcon Berlin Puts Security Research First

Sep 8, 2025 7:08 PM

Tags: ai, flaw, injection, risk, threat, vulnerability

Also: AI Threats, Old Flaws and Why Vendors Delay Fixes. AI prompt injection risks, decades-old vulnerabilities resurfacing in new systems and vendors prioritizing profits over protection defined the conversations at Nullcon Berlin 2025. Panelists shared how this event stood out for its technical depth and advancing security knowledge. First seen on govinfosecurity.com Jump to article:…
ISMG Editors: Nullcon Berlin Puts Security Research First

Sep 8, 2025 7:08 PM

Tags: ai, flaw, injection, risk, threat, vulnerability

Also: AI Threats, Old Flaws and Why Vendors Delay Fixes. AI prompt injection risks, decades-old vulnerabilities resurfacing in new systems and vendors prioritizing profits over protection defined the conversations at Nullcon Berlin 2025. Panelists shared how this event stood out for its technical depth and advancing security knowledge. First seen on govinfosecurity.com Jump to article:…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
APT37 Targets Windows with Rust Backdoor and Python Loader

Sep 8, 2025 5:08 PM

Tags: api, attack, backdoor, cctv, cloud, computer, control, data, detection, exploit, government, group, infection, injection, jobs, korea, malicious, malware, microsoft, monitoring, north-korea, organized, password, phishing, powershell, programming, rust, service, social-engineering, spear-phishing, startup, tactics, theft, threat, tool, update, vulnerability, windows

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals connected to the North Korean regime or involved in human rights activism, leveraging custom malware and adopting emerging technologies.In recent campaigns, APT37 utilizes a single command-and-control (C2) server…
Web Application Firewall Bypassed via JS Injection with Parameter Pollution

Sep 8, 2025 1:08 PM

Tags: cyber, firewall, injection, malicious, penetration-testing, waf, xss

In a recent autonomous penetration test, a novel cross-site scripting (XSS) bypass that sidesteps even highly restrictive Web Application Firewalls (WAFs). Security researchers uncovered a ASP.NET application protected by a rigorously configured WAF. Conventional XSS payloads”, breaking out of single-quoted JavaScript strings”, were promptly blocked. Yet by abusing HTTP parameter pollution, the team managed to…
Critical SAP S/4HANA flaw CVE-2025-42957 under active exploitation

Sep 5, 2025 11:20 PM

Tags: cve, exploit, flaw, injection, password, sap, vulnerability

Experts warn of an actively exploited vulnerability, tracked as CVE-2025-42957 (CVSS score: 9.9), in SAP S/4HANA software. A critical command injection vulnerability, tracked as CVE-2025-42957 (CVSS score of 9.9), in SAP S/4HANA is under active exploitation. An attacker can exploit this flaw to fully compromise SAP systems, altering databases, creating superuser accounts, and stealing password hashes. >>SAP…
Hacker nutzen gravierende Schwachstelle bei SAP S/4HANA aus

Sep 5, 2025 4:20 PM

Tags: access, authentication, bug, ciso, cloud, cve, cvss, cyberattack, exploit, flaw, germany, hacker, injection, monitoring, password, reverse-engineering, sans, sap, service, update, vulnerability

Ein Exploit für die Schwachstelle wurde bereits in freier Wildbahn beobachtet.Vergangenen Monat hat SAP einen Patch für S/4HANA herausgebracht, der die gewaltige Schwachstelle CVE-2025-42957 mit einem CVSS-Score von 9,9 beheben soll. Der nun aufgetauchte Exploit ermöglicht es einem User mit geringen Berechtigungen, mittels Code-Injection in der SAP-Programmiersprache ABAP die vollständige Kontrolle über ein S/4HANA-System zu…
Hacker nutzen gravierende Schwachstelle bei SAP S/4HANA aus

Sep 5, 2025 4:20 PM

Tags: access, authentication, bug, ciso, cloud, cve, cvss, cyberattack, exploit, flaw, germany, hacker, injection, monitoring, password, reverse-engineering, sans, sap, service, update, vulnerability

Ein Exploit für die Schwachstelle wurde bereits in freier Wildbahn beobachtet.Vergangenen Monat hat SAP einen Patch für S/4HANA herausgebracht, der die gewaltige Schwachstelle CVE-2025-42957 mit einem CVSS-Score von 9,9 beheben soll. Der nun aufgetauchte Exploit ermöglicht es einem User mit geringen Berechtigungen, mittels Code-Injection in der SAP-Programmiersprache ABAP die vollständige Kontrolle über ein S/4HANA-System zu…
Critical SAP S/4HANA vulnerability now exploited in attacks

Sep 5, 2025 4:20 PM

Tags: attack, breach, data-breach, exploit, injection, sap, vulnerability

A critical SAP S/4HANA code injection vulnerability is being leveraged in attacks in the wild to breach exposed servers, researchers warn. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-sap-s-4hana-vulnerability-now-exploited-in-attacks/
Critical SAP S/4HANA Vulnerability Actively Exploited, Allowing Full System Takeover

Sep 5, 2025 2:20 PM

Tags: control, cve, cvss, cyber, exploit, flaw, injection, sap, vulnerability

A critical security flaw in SAP S/4HANA, tracked as CVE-2025-42957, is being actively exploited by attackers, according to research from SecurityBridge. The vulnerability, which carries a CVSS score of 9.9 out of 10, allows a low-privileged user to execute code injection and gain full control of an SAP system. Organizations running SAP S/4HANA on-premise or…
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild

Sep 5, 2025 2:20 PM

Tags: cve, exploit, injection, sap, software, update, vulnerability

A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning (ERP) software, has come under active exploitation in the wild.The command injection vulnerability, tracked as CVE-2025-42957 (CVSS score: 9.9), was fixed by SAP as part of its monthly updates last month.”SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the…
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild

Sep 5, 2025 2:20 PM

Tags: cve, exploit, injection, sap, software, update, vulnerability

A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning (ERP) software, has come under active exploitation in the wild.The command injection vulnerability, tracked as CVE-2025-42957 (CVSS score: 9.9), was fixed by SAP as part of its monthly updates last month.”SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the…
Sitecore zero-day configuration flaw under active exploitation

Sep 5, 2025 12:20 AM

Tags: access, attack, breach, credentials, cve, data-breach, detection, exploit, flaw, framework, guide, injection, malicious, mandiant, microsoft, network, password, service, threat, tool, zero-day

__VIEWSTATE and can be signed and encrypted with keys, called ValidationKey and DecryptionKey, stored in the application configuration file.If these keys are stolen or leaked, attackers can use them to craft malicious ViewState payloads inside POST requests that the server will then decrypt, validate, and execute by loading them into the memory of its worker…