exfil-scan

exfil-scan 扫描LLM输出和AI生成内容中的数据传输信号，在到达用户、日志或下游系统之前进行检测。 1 为什么需要exfil-scan 现代LLM应用通常处理敏感提示、内部文档、API响应和用户数据。 这创建了一个新的安全边界：输出层 。 EchoLeak系列攻击（包括CVE-2025-32711）展示了隐藏或混淆的有效载荷如何被 嵌入在生成的文本中，并通过工具、链接或解析链来窃取数据。 传统扫描器关注文件、依赖项和运行时流量。 它们不会以专门构建的方式检查生成的模型输出。 exfil-scan提供了一个“LLM响应的病毒扫描器”： 检查纯文本、JSON、Markdown和日志...

Scammers Use Hidden Text to Bypass AI Email Filters in Phishing Scams

Scammers are hiding invisible text inside phishing emails to manipulate AI-powered email filters and increase the chances of scams reaching inboxes...

Too salty to handle: Exposing cases of CSS abuse for hidden text salting

Cisco Talos has been closely monitoring the abuse of cascading style sheets CSS properties to include irrelevant content or salt in different parts of messages, a technique known as hidden text salting. This blog is a follow-up to our previous reports in January and March 2025 on CSS abuse in...

Seasoning email threats with hidden text salting

Cisco Talos observed an increase in the number of email threats leveraging hidden text salting also known as "poisoning" in the second half of 2024. Hidden text salting is a simple yet effective technique for bypassing email parsers, confusing spam filters, and evading detection engines that rely...

Email Phishers Using A Simple Way to Bypass MS Office 365 Protection

Security researchers have been warning about a simple technique that cyber criminals and email scammers are using in the wild to bypass most AI-powered phishing detection mechanisms implemented by widely used email services and web security scanners. Dubbed ZeroFont , the technique involves...

Upload vulnerabilities hidden to text breakthrough hand-vulnerability warning-the black bar safety net

Article author:udb311 This article is by a upload the page break upload, saying at the time the group where talking about. Issued XXX website upload address, research over research in the past. Didn't find the breakthrough, the local modify the upload submission is still not a breakthrough. Just ...