An interesting approach to malware by checking for Claude Code CLI and Gemini CLI in compromised \`nx\` package to explore local filesystem and steal credentials, api keys, wallets, etc.
An interactive application that visualizes and demonstrates Google’s CaMeL (Capabilities for Machine Learning) security approach for defending against prompt injections in LLM agents.
Link to original paper: [https://arxiv.org/pdf/2503.18813](https://arxiv.org/pdf/2503.18813)
All credit to the original researchers
title={Defeating Prompt Injections by Design},
author={Edoardo Debenedetti and Ilia Shumailov and Tianqi Fan and Jamie Hayes and Nicholas Carlini and Daniel Fabian and Christoph Kern and Chongyang Shi and Andreas Terzis and Florian Tramèr},
year={2025},
eprint={2503.18813},
archivePrefix={arXiv},
primaryClass={cs.CR},
url={https://arxiv.org/abs/2503.18813},
}
US CERT/CC warns of flaws in Workhorse Software accounting software used by hundreds of municipalities in Wisconsin
Source: https://securityaffairs.com/181363/security/us-cert-cc-warns-of-flaws-in-workhorse-software-accounting-software-used-by-hundreds-of-municipalities-in-wisconsin.html
A recent scam involves fake Tesla websites advertised through Google paid ads, targeting potential customers interested in preordering the Optimus robot. These fraudulent sites mimic Tesla's official website design and offer non-existent preorders for various Tesla products, including the Optimus robot. The scam aims to collect $250 non-refundable deposits and potentially steal credit card information. Multiple fake domains have been identified, with some already taken offline. The fraudulent sites lack login functionality and may redirect users to fake authentication pages. Tesla is likely monitoring and requesting takedowns of these sites. The scam exploits the anticipation surrounding Tesla's future products and may go unnoticed until expected delivery dates.
FTC: older adults lost record $700 million to scammers in 2024
Source: https://www.bleepingcomputer.com/news/security/ftc-older-adults-lost-record-700-million-to-scammers-in-2024/
Inside the ChatGPT iOS app, I’m using the built-in code interpreter. Every time I ask it to scan for open ports, it shows port 8080 bound to 0.0.0.0, not localhost, like it used to. Happens across sessions, even after restarting the phone and turning off the local network feature in app settings.
Same PID (3), same process (python3). Also seeing two private IPs (10.x.x.x) and localhost loopbacks, about 18 of them. As well as access to internal libraries, A LOT of them.
Looks like something is preloaded inside the interpreter container. Anyone know what this is?
As I’m writing this, apparently the localhost connection to 8080 is weirder than 0.0.0.0.
I’m clearly clueless, but I noticed a weird change and decided to share.
IPv6 security has recently become a pressing issue. In this article, I will discuss attacks on IPv6 and methods of protection.
This article discusses attacks on IPv6 using passive NDP sniffing, RA spoofing, RDNSS spoofing, and DHCPv6 snooping. It also discusses methods of protection against these attacks.
N Korean Hackers Drop NimDoor macOS Malware Via Fake Zoom Updates
Source: https://hackread.com/n-korean-hackers-nimdoor-macos-malware-fake-zoom-updates/
Ex-student charged over hacking university for cheap parking, data breaches
Source: https://www.bleepingcomputer.com/news/security/ex-student-charged-over-hacking-university-for-cheap-parking-data-breaches/
Malicious PyPI Package Masquerades as Chimera Module to Steal AWS, CI/CD, and macOS Data
Source: https://thehackernews.com/2025/06/malicious-pypi-package-masquerades-as.html
Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month
Source: https://thehackernews.com/2025/06/over-269000-websites-infected-with.html
