Robuta

https://simonwillison.net/2023/Nov/4/hacking-google-bard-from-prompt-injection-to-data-exfiltration/ Hacking Google Bard - From Prompt Injection to Data Exfiltration Bard recently grew extension support, allowing it access to a user's personal documents. Here's the first reported prompt injection attack against that. This... hacking googleprompt injectionbarddataexfiltration https://simonwillison.net/2024/Jun/16/github-copilot-chat-prompt-injection/ GitHub Copilot Chat: From Prompt Injection to Data Exfiltration Yet another example of the same vulnerability we see time and time again. If you build an LLM-based chat interface that gets exposed to both private and... github copilot chatprompt injectiondataexfiltration https://www.cyberhaven.com/ Stop Data Exfiltration with the AI & Data Security Platform (DSPM, DLP & Insider Risk) | Cyberhaven Bring together DSPM, DLP, and insider risk management to prevent data exfiltration across SaaS, endpoints, cloud, and AI tools using Cyberhaven’s AI and data... stop data exfiltrationai security platform https://cryptocat.me/blog/ctf/2022/nahamcon/web/hacker_ts/ Stored XSS to Admin Endpoint Exfiltration | NahamCon CTF 2022: Hacker T's - CryptoCat's Blog Hacker T's web writeup from NahamCon CTF 2022. Exploit a stored XSS in custom t-shirt input to access the admin endpoint and exfiltrate the flag. https://help.nightfall.ai/data-exfiltration-prevention/exfiltration_salesforce/policies/integration Salesforce App Selection | Data Exfiltration Prevention | Nightfall Documentation data exfiltration preventionsalesforce appselectionnightfalldocumentation https://unit42.paloaltonetworks.com/privilege-escalation-llm-model-exfil-vertex-ai/ ModeLeak: Privilege Escalation to LLM Model Exfiltration in Vertex AI New research reveals two vulnerabilities in Google's Vertex AI that may lead to privilege escalation or data theft through custom jobs or malicious models. New... privilege escalationllmmodelexfiltrationvertex https://techchannel.com/security/mainframe-data-exfiltration-new-vulnerabilities/ New Mainframe Data Exfiltration Vulnerabilities Emerge - TechChannel Mar 3, 2025 - The integration of mainframes into broader networks makes them susceptible to data heists from which there is no recovering data exfiltrationnewmainframevulnerabilitiesemerge https://dmcxblue.gitbook.io/red-team-notes/exfiltration Exfiltration | Red Team Notes red teamexfiltrationnotes https://www.cloudvulndb.org/azure-logic-apps-secrets-control-plane-exfiltration Silent Reaper (Azure LogicApp Secrets Control Plane Exfiltration) | cloudvulndb.org Cloud vulnerabilities database - an open project to list all known cloud vulnerabilities and Cloud Service Provider security issues control planesilentreaperazuresecrets https://securityarsenal.com/blog/elastic-cloud-siem-abused-for-data-exfiltration-detection-and-hunting-guide Elastic Cloud SIEM Abused for Data Exfiltration: Detection and Hunting Guide | Security Arsenal |... Apr 17, 2026 - Attackers are exploiting security flaws to steal data, managing it via Elastic Cloud infrastructure. Detect this unauthorized cloud egress now. https://www.cyberhaven.com/use-cases/stop-data-exfiltration Complete Data Exfiltration Protection in One Solution | Cyberhaven One platform to prevent data exfiltration across all channels. Go beyond content inspection with data lineage to reduce false positives by 95%. data exfiltration protectionone solutioncompletecyberhaven https://www.nexsys.it/brand/itsmine/ ITsMine: soluzione DLP per la protezione da exfiltration ITsMine ti aiuta ad implementare in maniera facile la Data Loss Prevention (DLP), in modo da proteggersi dalle minacce di sicurezza esterne ed interne. la protezionesoluzionedlpperda https://www.okta.com/en-gb/identity-101/data-exfiltration/ Data Exfiltration: Definition, Damage & Defense | Okta data exfiltrationdefinitiondamagedefenseokta https://hawk-eye.io/tag/data-exfiltration/ Data Exfiltration Archives - HawkEye data exfiltrationarchiveshawkeye https://delinea.com/events/podcasts/108-the-rise-of-ransomware-and-data-exfiltration-with-tony-goulding The Rise of Ransomware and Data Exfiltration with Tony Goulding Joseph Carson and Tony Goulding discuss key findings from the Verizon DBIR, focusing on credential compromise, ransomware, and security tips. the rise of ransomwaredata exfiltrationtonygoulding https://www.trendmicro.com/pl_pl/research/26/c/from-misconfigured-spring-boot-actuator-to-sharepoint-exfiltrati.html From Misconfigured Spring Boot Actuator to SharePoint Exfiltration: How Stolen Credentials Bypass... Mar 18, 2026 - Not every cloud breach starts with malware or a zero-day. In this incident, attackers discovered an exposed Spring Boot Actuator endpoint, harvested... spring boot https://blog.netmanageit.com/a-hybrid-approach-with-data-exfiltration-and-encryption/ A Hybrid Approach with Data Exfiltration and Encryption Jul 14, 2025 - NetmanageIT OpenCTI - opencti.netmanageit.com hybrid approachdata exfiltrationencryption https://kc7cyber.com/glossary/data-exfiltration data-exfiltration Data exfiltration is the process of an attacker stealing data from a network and transferring it to a system they control. The goal is to take information ... dataexfiltration https://www.darknet.org.uk/2016/12/dnsteal-dns-exfiltration-tool/ dnsteal - DNS Exfiltration Tool - Darknet - Hacking Tools, Hacker News & Cyber Security dnsteal is a DNS exfiltration tool, essentially a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. dns exfiltrationhacking toolshacker newsdarknet https://www.kqlsearch.com/query/Detect%20Copilot%20Exfiltration%20arises%20from%20AiTM%20Token%20Theft&clzh1x9wh000q5ivo3t1bddt0 Detect Copilot Exfiltration Arises From Ai TM Token Theft | KQL Search KQL Query: Detect Copilot Exfiltration Arises From Ai TM Token Theft detectcopilotexfiltration https://efficientip.com/resources/free-dns-data-exfiltration-test/ Free DNS Data Exfiltration Test | EfficientIP Apr 23, 2024 - Cyber criminals benefit from this assumption to bypass security mechanisms for transporting sensitive data from inside to outside the enterprise. free dnsdata exfiltrationtestefficientip https://www.hackingarticles.in/category/red-teaming/exfiltration/ Exfiltration Archives - Hacking Articles Advanced data exfiltration techniques for red teams and penetration testers. Master DNS/ICMP tunneling, C2 channel exfiltration (Cobalt Strike, Sliver), and... exfiltrationarchiveshackingarticles https://uncoverdc.com/2020/05/13/no-proof-of-russian-exfiltration/ No Proof of Russian Exfiltration: What does it mean? | UncoverDC | uncoverdc.com what does it meanproofrussianexfiltration https://aisecurityguard.io/learn/article/url-validation-protocol-for-ai-agents-preventing-data-exfilt URL Validation Protocol for AI Agents: Preventing Data Exfiltration Through Prompt Injection | AI... AI agents that fetch web content on behalf of users face a critical security challenge: a malicious URL embedded in a prompt can transform your system into an u for ai agents https://riviereblanche.com/blanche-2146-exfiltration.html Exfiltration exfiltration https://blog.citp.princeton.edu/2020/07/14/can-the-exfiltration-of-personal-data-by-web-trackers-be-stopped/ Can the exfiltration of personal data by web trackers be stopped? - CITP Blog by Günes Acar, Steven Englehardt, and Arvind Narayanan. In a series of posts on this blog in 2017/18, we revealed how web trackers exfiltrate personal... https://thehackernews.com/2026/02/beyondtrust-flaw-used-for-web-shells.html?ref=blog.netmanageit.com BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration CVE-2026-1731 in BeyondTrust RS and PRA is exploited for ransomware, web shells, C2, and data theft across multiple sectors used forbeyondtrustflawwebshells https://www.cshub.com/executive-decisions/demos/stopping-data-exfiltration-prior-to-export Stopping Data Exfiltration Prior to Export In order to meet the needs of specific applications and industry segments, an additional layer of trust is needed which provides comprehensive protection,... data exfiltrationstoppingpriorexport https://packetmischief.ca/2023/07/31/amazon-ec2-credential-exfiltration-how-it-happens-and-how-to-mitigate-it/ Amazon EC2 Credential Exfiltration: How It Happens and How to Mitigate It :: packetmischief.ca An introduction to Amazon EC2 credentials When you assign an Identity and Access Management (IAM) role to an Amazon Elastic Compute Cloud (EC2) instance, the... how it happens https://codepaste.net/extremely-useful-yet-significantly-risky-browser-extensions-and-data-exfiltration/ Extremely Useful Yet Significantly Risky: Browser Extensions and Data Exfiltration - codepaste Apr 22, 2020 - codepaste Tech advice browser extensionsdata exfiltrationextremelyusefulyet https://www.inceptionsecurity.com/blog/tags/microsoft-365-exfiltration-detection microsoft 365 exfiltration detection | Inception Security microsoftexfiltrationdetectioninceptionsecurity https://breachspot.com/news/vulnerabilities/hunters-international-ransomware-shifts-focus-to-data-exfiltration-and-extortion-strategies/ Hunters International Ransomware Shifts Focus to Data Exfiltration and Extortion Strategies -... Apr 4, 2025 - Ransomware gangs are notorious for first stealing data from servers before encrypting it, holding it hostage until a ransom is paid. The act of siphoning off... hunters internationaldata exfiltrationransomwareshiftsfocus https://cvefeed.io/vuln/detail/CVE-2019-19771 CVE-2019-19771 - Lodahs Node.js Cryptocurrency Wallet Exfiltration Trojan Nov 21, 2024 - The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan... node jscryptocurrency walletcveexfiltrationtrojan https://www.trendmicro.com/it_it/research/22/g/log4shell-vulnerability-in-vmware-leads-to-data-exfiltration-and-ransomware.html Log4Shell Vulnerability in VMware Leads to Data Exfiltration and Ransomware | Trend Micro (IT) Jun 28, 2022 - We analyzed cases of a Log4Shell vulnerability being exploited in certain versions of the software VMware Horizon. Many of these attacks resulted in data being... https://attack.mitre.org/techniques/T1020/ Automated Exfiltration, Technique T1020 - Enterprise | MITRE ATT&CK® automatedexfiltrationtechniqueenterprisemitre https://www.blackfog.com/lake-dallas-isd-chooses-blackfog/ Lake Dallas ISD Chooses BlackFog to Prevent Data Exfiltration | BlackFog Jul 30, 2025 - Lake Dallas ISD serves about 4,000 students in Denton County uses BlackFog's anti data exfiltration to protect the school district. lake dallasisdpreventdataexfiltration https://www.ainewshub.org/blog/tags/data-exfiltration Data Exfiltration | AI News Hub data exfiltrationai newshub https://www.halcyon.ai/platform/data-exfiltration-protection Data Exfiltration Protection Halcyon DXP detects and stops ransomware data theft early, alerting on suspicious outbound flows and blocking double-extortion attempts data exfiltrationprotection https://attack.mitre.org/techniques/T1041/ Exfiltration Over C2 Channel, Technique T1041 - Enterprise | MITRE ATT&CK® exfiltrationchanneltechniqueenterprisemitre https://www.cve.news/cve-2025-27784/ CVE-2025-27784 - Applio Arbitrary File Read Leads to SSRF Data Exfiltration Jan 15, 2026 - Published: June 2024 Author: [Your Name] Overview Applio is an open-source voice conversion toolkit, popular among hobbyists and professionals seeking to... https://www.dataresolve.com/data-exfiltration-intelligence.php Data Exfiltration Intelligence data exfiltrationintelligence https://thum.co/services/storm-drain-installation-palm-beach/ Storm Drain Installation Palm Beach County | Catch Basin, Manhole, Exfiltration May 1, 2026 - Storm drainage installation and repair across Palm Beach County. Catch basins, manholes, exfiltration trenches, french drains, storm pipe repair. Commercial... storm drain installationpalm beach countycatch basinmanholeexfiltration https://community.fortinet.com/fortianalyzer-6/technical-tip-fortianalyzer-event-handler-for-data-exfiltration-detection-187701 Technical Tip: FortiAnalyzer Event Handler for data exfiltration detection | Community Description This article describes the FortiAnalyzer Event Handler to detect Data Exfiltration. Scope FortiAnalyzer v7.2.0 and above. Solution S... event handlerfor datatechnicaltipfortianalyzer https://securityexpress.info/tag/data-exfiltration/ Data Exfiltration Archives - Tech News data exfiltrationarchivestechnews