xAI’s Grok Vulnerable to Cryptographic Context Injection
xAI's Grok chatbot is vulnerable to a Cryptographic Context Injection attack that allows malicious web pages to steal user data. The attack…
Tag: Data Exfiltration
Grok Chatbot Data Exfiltration via Cryptographic Context Injection
Grok, xAI's chatbot, is susceptible to a Cryptographic Context Injection attack that can leak user data to attacker-controlled servers. The attack exploits…
Rclone
Rclone is a command-line program to manage files on cloud storage. Qilin ransomware affiliates used Rclone for data exfiltration to cloud services…
Rclone: Data Exfiltration Tool
Rclone is used by INC ransomware to exfiltrate data after staging it as password-protected archives.
Salesforce REST API: Data Access Interface
The Salesforce REST API was used by attackers to bulk retrieve CRM records after obtaining OAuth tokens from Klue's compromised integration.
DifyTap Vulnerabilities Expose AI Chat Data Across Tenants in Open-Source Platform Dify
Cybersecurity researchers at Zafran Security have disclosed four vulnerabilities in Dify, an open-source agentic workflow platform with over 146,000 GitHub stars, collectively…