8456 matches found
A Bootiful Podcast: Roni Dover on Digma AI
Hi, Spring fans! In this installment we talk to Digma AI founder Roni Dover...
Navigating the Waters of Generative AI
Part I: The Good and the Bad of AI Few would argue that 2023 was the year AI, specifically generative AI Gen AI like ChatGPT, was discussed everywhere. In October, Forrester published a report about how security tools will leverage AI. The findings in that report showed that Gen AI would augment...
PT-2024-14181 · Unknown · Ai Power: Complete Ai Pack
Name of the Vulnerable Software and Affected Versions: AI Power: Complete AI Pack – Powered by GPT-4 versions 1.8.12 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
This Week in Spring - February 27th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring wherein we explore the latest-and-greatest in the wonderful world of Springdom. This week's going to be a very good one, so let's dive right into it! good news everyone! Spring Boot's been updated! 3.3.0-M2, 3.2.3, and 3.1.9 a...
Three Tips to Protect Your Secrets from AI Accidents
Last year, the Open Worldwide Application Security Project OWASP published multiple versions of the "OWASP Top 10 For Large Language Models," reaching a 1.0 document in August and a 1.1 document in October. These documents not only demonstrate the rapidly evolving nature of Large Language Models,...
Microsoft Releases PyRIT - A Red Teaming Tool for Generative AI
Microsoft has released an open access automation framework called PyRIT short for Python Risk Identification Tool to proactively identify risks in generative artificial intelligence AI systems. The red teaming tool is designed to "enable every organization across the globe to innovate responsibly...
A Bootiful Podcast: Timefold Solver AI lead Geoffrey De Smet
Hi, Spring fans! In this installment, I talk to Timefold Solver AI lead Geoffrey De Smet about the amazing new integrations for Spring Boot developers...
Exploit for Unrestricted Upload of File with Dangerous Type in Meowapps Ai_Engine
CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unaut...
CVE-2024-23654
discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit...
Server side request forgery (ssrf)
discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit...
CVE-2024-23654 discourse-ai admin-initiated SSRF when interacting with AI services
discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit...
CVE-2024-23654 discourse-ai admin-initiated SSRF when interacting with AI services
discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit...
CVE-2024-23654
The CVE-2024-23654 entry concerns the discourse-ai plugin for Discourse, where admin-initiated SSRF was possible during interactions with various AI services. The underlying issue affected versions prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd; a patch was added in that commit. A pract...
CVE-2024-23654 discourse-ai admin-initiated SSRF when interacting with AI services
discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactions with different AI services are vulnerable to admin-initiated SSRF attacks. Versions of the plugin that include commit...
Anne Neuberger, a Top White House Cyber Official, Sees the 'Promise and Peril' in AI
Anne Neuberger, the Biden administration’s deputy national security adviser for cyber, tells WIRED about emerging cybersecurity threats—and what the US plans to do about them...
Decoding Digital Transformation: AI, ML, and RPA in the Modern Era
Explore the first article in this series about AI, ML, and RPA, which aims to demystify and explore the full spectrum of these core technologies...
PT-2024-20003 · Discourse · Discourse Ai
Name of the Vulnerable Software and Affected Versions: discourse-ai versions prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd Description: The discourse-ai plugin for the open-source discussion platform Discourse is affected by an issue where interactions with different AI services are...
The New York Times vs. OpenAI: A Turning Point for Web Scraping?
In a recent blog, we covered the blurry lines of legality surrounding web scraping and how the advent of artificial intelligence AI and large language models LLMs further complicates the matter. Shortly after publishing the blog, a significant legal development began unfolding: The New York Times...
Microsoft Is Spying on Users of Its AI Tools
Microsoft announced that it caught Chinese, Russian, and Iranian hackers using its AI tools--presumably coding tools--to improve their hacking abilities. From their report: In collaboration with OpenAI, we are sharing threat intelligence showing detected state affiliated adversaries--tracked as...
