Author | Lightnews

キタきつね @kitafox.bsky.social · 5h

パストラバーサルからサプライチェーンの侵害まで：MCPサーバーホスティングの突破

From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting #SecurityBoulevard (Oct 22)

securityboulevard.com/2025/10/from...

From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting

We found a path traversal vulnerability in Smithery.ai that compromised over 3,000 MCP servers and exposed thousands of API keys. Here's how a single Docker build bug nearly triggered one of the…

securityboulevard.com

キタきつね @kitafox.bsky.social · 6h

SpaceX、ミャンマーの詐欺拠点で使用された2,000台以上のStarlinkデバイスを無効化

SpaceX disables more than 2,000 Starlink devices used in Myanmar scam compounds #TheRecord (Oct 23)

therecord.media/spacex-disab...

SpaceX disables more than 2,000 Starlink devices used in Myanmar scam compounds

Lauren Dreyer, the vice-president of Starlink’s business operations, said in a post on X Tuesday night that the company “proactively identified and disabled over 2,500 Starlink Kits in the vicinity…

therecord.media

キタきつね @kitafox.bsky.social · 6h

ジャガー・ランドローバーへのサイバー攻撃の被害額は25億ドルと監視団体が発表

Jaguar Land Rover cyberattack cost $2.5 billion, says monitoring group #TheRecord (Oct 22)

therecord.media/jaguar-land-...

Jaguar Land Rover cyberattack cost $2.5 billion, says monitoring group

The nonprofit Cyber Monitoring Centre says the cyberattack on Jaguar Land Rover is “the most economically damaging cyber event” to ever impact the United Kingdom.

therecord.media

キタきつね @kitafox.bsky.social · 7h

英国はここ数十年で「最も議論を呼ぶ複雑な」脅威に直面しているとGCHQ長官が警告

UK facing ‘most contested and complex’ threat in decades, warns GCHQ director #TheRecord (Oct 23)

therecord.media/facing-anne-...

UK facing ‘most contested and complex’ threat in decades, warns GCHQ director

Britain’s security agencies are grappling with the most “contested and complex” threat environment in decades, one of the country’s most senior spies warned.

therecord.media

キタきつね @kitafox.bsky.social · 7h

クランストン氏の反対を受けて、OpenAIは著名人の肖像にさらなるガードレールを設置

OpenAI puts more guardrails on celebrity likenesses after Cranston leads pushback #BiometricUpdate (Oct 22)

www.biometricupdate.com/202510/opena...

OpenAI puts more guardrails on celebrity likenesses after Cranston leads pushback | Biometric Update

YouTube is also worried about celebrity deepfakes, and is beginning to expand its likeness detection feature to all creators in the YouTube Partner Program.

www.biometricupdate.com

キタきつね @kitafox.bsky.social · 8h

オーストラリアの健康記録のデータ漏洩はパスキー導入後50%減少：OAIC

Data breaches of Australia’s health records drop 50% after passkey adoption: OAIC #BiometricUpdate (Oct 22)

www.biometricupdate.com/202510/data-...

Data breaches of Australia’s health records drop 50% after passkey adoption: OAIC | Biometric Update

The system, which contains patient reports, prescriptions and hospital stays, is linked to the myGov app which integrated biometric passkey security.

www.biometricupdate.com

キタきつね @kitafox.bsky.social · 8h

攻撃者はクラウドのみの技術を使用して小売業者のギフトカードシステムを標的にしています

Attackers target retailers’ gift card systems using cloud-only techniques #HelpNetSecurity (Oct 22)

www.helpnetsecurity.com/2025/10/22/c...

Attackers target retailers’ gift card systems using cloud-only techniques - Help Net Security

Researchers uncovered an attack campaign that uses phishing and cloud abuse to compromise global retailers and perpetrate gift cards fraud.

www.helpnetsecurity.com

キタきつね @kitafox.bsky.social · 8h

生、死、そしてオンラインアイデンティティ: 死後、オンラインアカウントはどうなるのでしょうか?

Life, death, and online identity: What happens to your online accounts after death? #HelpNetSecurity (Oct 22)

www.helpnetsecurity.com/2025/10/22/w...

Life, death, and online identity: What happens to your online accounts after death? - Help Net Security

Ensuring that our loved ones have legal access to our online accounts after death or incapacity strikes becomes critically important.

www.helpnetsecurity.com

キタきつね @kitafox.bsky.social · 8h

攻撃者は信頼できるOAuthアプリをクラウドのバックドアに変えます

Attackers turn trusted OAuth apps into cloud backdoors #HelpNetSecurity (Oct 22)

www.helpnetsecurity.com/2025/10/22/a...

Attackers turn trusted OAuth apps into cloud backdoors - Help Net Security

Attackers are increasingly abusing internal OAuth-based applications to gain persistent access to cloud environments, Proofpoint warns.

www.helpnetsecurity.com

キタきつね @kitafox.bsky.social · 9h

企業はサイバー攻撃による逆風を受けずにAIの恩恵を得たいと考えている

Companies want the benefits of AI without the cyber blowback #HelpNetSecurity (Oct 22)

www.helpnetsecurity.com/2025/10/22/2...

Companies want the benefits of AI without the cyber blowback - Help Net Security

51% of European cybersecurity professionals expect AI-driven threats and deepfakes to be their top concern in 2026, ISACA says.

www.helpnetsecurity.com

キタきつね @kitafox.bsky.social · 10h

ガートナー IT シンポジウム/Xpo 2025 オーランド：3日目のハイライト

Gartner IT Symposium/Xpo 2025 Orlando: Day 3 Highlights #Gartner (Oct 22)

www.gartner.com/en/newsroom/...

Gartner IT Symposium/Xpo 2025 Orlando: Day 3 Highlights

We are bringing you news and highlights from Gartner IT Symposium/Xpo, taking place this week in Orlando, Florida.

www.gartner.com

キタきつね @kitafox.bsky.social · 10h

AIモデルを汚染するにはたった250件の文書で十分

It Takes Only 250 Documents to Poison Any AI Model #DarkReading (Oct 23)

www.darkreading.com/application-...

It Takes Only 250 Documents to Poison Any AI Model

Researchers find it takes far less to manipulate a large language model's (LLM) behavior than anyone previously assumed.

www.darkreading.com

キタきつね @kitafox.bsky.social · 11h

秘密が多すぎる：機密データの拡散を狙う攻撃者

Too Many Secrets: Attackers Pounce on Sensitive Data Sprawl #DarkReading (Oct 23)

www.darkreading.com/cyber-risk/t...

Too Many Secrets: Hackers Target Sensitive Data Sprawl

Hardcoded credentials, access tokens, and API keys end up in the darnedest places, prompting a call for organizations to stop over-privileging secrets.

www.darkreading.com

キタきつね @kitafox.bsky.social · 11h

ロシアが方針転換、国内ハッカーの取り締まり強化

Russia Pivots, Cracks Down on Resident Hackers #DarkReading (Oct 22)

www.darkreading.com/threat-intel...