Hello and welcome to the Friday, July 24th, 26 edition of the Sands Internet Storm Center's Stormcast.

My name is Johannes Ulrich, recording today from Jacksonville, Florida.

This episode is brought you by the Sands.edu master's degree program in information

security engineering. The opening eye versus hugging phase incident does still dominate the news.

And Renato today wrote up as his diary for the day, a summary of it, with some lessons learned.

I think are quite valuable here.

So first of all, that if you have some kind of sandbox or so for your agent,

it's typically not providing the security isolation that you expect.

It's for many agents, really just more of a

guideline. Secondly, well, there's not this assimity problem around guardrails that Hucking Face ran into

where their models actually refuse to analyze some of the evidence or respond because of guardrails they ran

into. So that's an interesting, I think, lesson to take away from this. And then of course,

well, how did it actually get in? What were the vulnerabilities? And here, non-human identities,

API keys and stuff like this still sort of played a major role here.

So that's something that, of course, a lot of human-initiated exploits and intrusions are

leveraging as well. So definitely something that you probably want to restrict and control.

A couple times in the past, I've cross-sides-scripting vulnerabilities in

CIMRA. So just fitting that SISA in conjunction with other cybersecurity agencies

has published an advisory how a Russian state-sponsored actor is using cross-sad-scripting

vulnerabilities to attack CIMPRA users.

So CIMPRA, like all webmail systems, is struggling with cross-sides scripting.

You have to essentially display HTML email with cascading style sheets inside the user's browser,

...