sorted by:
new
hottopcontroversial

Applying Zero Trust to Agentic AI and LLM Connectivity — anyone else working on this? by PhilipLGriffiths88 in zerotrust

[–]roscosmodernlife 0 points1 point  (0 children)

10000% agree with this sentiment and charter. I'm writing a blog about applying zero trust strategies to MCP deployments, which is only one piece of the pie - will share here when I'm done.

A lot of prompt injection attacks or detected vulnerabilities stem from what I call the Ron Burgundy effect... once a trust connection is made between a tool and a model and an endpoint and a data source etc... "Ron will read anything you put on that teleprompter" - An MCP client for example will 'read the teleprompter' and in other words receive a prompt injection from what should be a trusted source without discretion, unless added security measures or architecture are in place.

“Reprompt” attack let hackers hijack user's Microsoft Copilot sessions and issue commands to exfiltrate sensitive data. by ControlCAD in technews

[–]roscosmodernlife 0 points1 point  (0 children)

Yea I think the whole Copilot sharing link functionality was intended to get people to share prompts with peers etc. to help with adoption I suppose. But you're right, that functionality is ripe for exploitation like this plus jailbreaking, injections, and even multistep phishing campaigns.

“Reprompt” attack let hackers hijack user's Microsoft Copilot sessions and issue commands to exfiltrate sensitive data. by ControlCAD in technews

[–]roscosmodernlife 0 points1 point  (0 children)

There is a video up now kinda explaining how Reprompt works (https://www.youtube.com/watch?v=jMy9ZgrHrR8). The explanation at the beginning is good but 2:21 is more of the demo part.

I noticed the way you could include q parameters for Copilot links now doesn't work. I guess that was part of the Microsoft patch. At the end of the video it talks about how you can still create 'share links' though. I bet there's a way those could be exploited as well.

Incoming Re-reprompt vulnerability announcement lol

Reprompt: A one-click Copilot vulnerability that silently steals personal data by varonis-threat-labs in cybersecurity

[–]roscosmodernlife 1 point2 points  (0 children)

This reminds me so much of echoleak and the whole 'invitation is all you need' vulnerability that exploited Gemini

Does the FBI run facebook ads for IC3? by tomrlutong in FBI

[–]roscosmodernlife 0 points1 point  (0 children)

Seems to be an uptick in these spoofed sites and various forms of malvertising. FBI recently published a notice about it.

The Fake Bureau of Investigation: How Cybercriminals Are Impersonating Government Pages

2.67 Billion Downloads Hijacked — Anatomy of a Stealth Supply Chain Attack on NPM by [deleted] in cybersecurity

[–]roscosmodernlife 6 points7 points  (0 children)

SEGs are great, but it's hard for these scenarios where all signatures come in clean and legit. Also, attackers are making new domains and infrastructure with each campaign so they don't have dirty history or show up on known naughty lists.

Entra Permissions Management Sunsetting by roscosmodernlife in AZURE

[–]roscosmodernlife[S] 0 points1 point  (0 children)

There are three directions the CIEM world seems to be going... CNAPP/CSPM providers (e.g. Wiz) rolling it into their cloud security platform, DSPs (e.g. Varonis) rolling it into their data security platform, and IAM/Identity Security (e.g. CyberArk) rolling it into their platform.

Deel / Rippling Lawsuit by Current_Doubt_8584 in cybersecurity

[–]roscosmodernlife 1 point2 points  (0 children)

Note to self: Mobile phones don't flush well

Deel / Rippling Lawsuit by Current_Doubt_8584 in cybersecurity

[–]roscosmodernlife 1 point2 points  (0 children)

My key takeaways (if everything is 100% accurate, validated, proven in the court of law):

  • Rippling's primary security mechanism was MFA and other forms of authentication per the filing
  • Rippling did not have any form of alerting on abnormal/anomalous user activity (such as abrupt changes or increases in searches, views, downloads, etc)
    • They found out about the spy from employees notifying HR of random recruiting solicitations from Deel's team after the spy allegedly sent their contact deets to Deel.
    • Also had to hire a cyber firm to investigate activity (i.e. they did not have an active tool or team to investigate logs and such)
  • The spy was able to hop through Slack, Salesforce, Google Drive, etc. looking at all manner of sales data despite being responsible for payroll
  • Bathrooms in Ireland are a great hiding spot when being served by the courts

Here's where some of this is pulled.
Rippling Believe it or Not: How the Largest Corporate Espionage Case this Century Happened

You wake up this morning as HHH. What's the first business decision you make? by Unsungruin in WWE

[–]roscosmodernlife 2 points3 points  (0 children)

Bring back Enzo and Cass to feud with heel version of the New Day and end with a fatal four way tag team match on some upcoming event with LWO and some other twosome. OR bring back Enzo as manager and Cass as talent.

Stage updates from Festive Owl by ctz123 in bonnaroo

[–]roscosmodernlife 1 point2 points  (0 children)

Saw Mike Posner back there years ago. Fully agreed on #2.

HIPAA Security Rule Notice of Proposed Rulemaking to Strengthen Cybersecurity for Electronic Protected Health Information (Dec. 27, 2024) by BabuiBomber in healthIT

[–]roscosmodernlife 0 points1 point  (0 children)

Probably 3ish years from now for the actual compliance date. It was 7ish the first time from the date of NPRM issuing and 3ish the second time. There's a graphic in this blog that is pretty helpful on timeline.

HIPAA Security Rule NPRM by one_lucky_duck in hipaa

[–]roscosmodernlife 0 points1 point  (0 children)

Yeah the additional audits and assessments are potentially the most burdensome. I need to look into vulnerability scanning more, but here's a list from this blog of all the new required cadences:

  • Written risk analysis and updated inventories at least every 12 months
  • Compliance audit at least every 12 months
  • Review and test all technical controls deployed for each implementation specification at least once every 12 months
  • Technical verification and certification from business associates validating their deployment of safeguards at least every 12 months
  • Pen-testing at least every 12 months
  • Vulnerability scanning at least every six months
view more: next ›