Tech Unplugged

This research investigates the security vulnerabilities of large language models (LLMs) used for translating natural language into SQL queries (Text-to-SQL), specifically focusing on the threat of backdoor attacks. The authors introduce ToxicSQL, a novel framework to create stealthy backdoors that can lead to the generation of malicious, yet executable, SQL queries through semantic and character-level triggers. Experiments demonstrate that even a small amount of poisoned data can result in high attack success rates, highlighting the significant security risks in relying on potentially compromised LLM-based Text-to-SQL models and underscoring the urgent need for robust defense mechanisms.

SubLimetechie's comprehensive report analyzes numerous global large language models (LLMs), contrasting their backend architectures, reliability measures, scalability, training data, and performance. The analysis spans proprietary models like GPT-4 and Claude 3.5 to open-source options such as Llama 3.2 and Falcon 180B, also including regional leaders. The report helps understand the strengths and weaknesses of each LLM for various applications, ultimately guiding users in selecting the most suitable model based on their specific requirements.

This podcast from Tech Unplugged, dated March 2025, explores the collaboration between browser APIs and Web Application Firewalls (WAFs) in order to better protect against client-side attacks. It defines WAFs and common client-side threats like XSS, CSRF, and clickjacking. The report then outlines various browser APIs relevant to security and details WAF features designed for client-side defense. Finally, it discusses the integration of these technologies and offers best practices and identifies limitations of relying on browser APIs for security in WAF implementations, concluding with real-world examples and a summary of their combined role in web security.

A security researcher at Harel Security Research discovered a vulnerability allowing for ChatGPT account takeover. This was achieved through a "wildcard" web cache deception. The researcher found that a broad caching rule for the /share/ path, combined with a difference in how Cloudflare's CDN and OpenAI's web server parsed URL-encoded path traversals, led to the flaw. By crafting a specific URL, an attacker could cache sensitive API endpoints containing user authentication tokens. When a victim clicked this manipulated link, their token would be stored in the cache. Subsequently, the attacker could retrieve this cached token, gaining unauthorized access to the victim's ChatGPT account. This vulnerability, a variation of a previously patched issue, highlights the dangers of inconsistent URL parsing between different server components and earned the researcher a significant bug bounty.

This compilation of excerpts from various sources explores the multifaceted landscape of artificial intelligence, examining its ethical, legal, policy, and societal implications. Contributions from legal scholars, philosophers, and technology experts analyze topics such as the explainability and regulation of AI, its impact on fundamental rights and media, and the challenges it poses to established legal frameworks like data protection, competition law, and intellectual property. The texts also investigate the concepts of fairness, responsibility, and sustainability in the context of AI development and deployment, while considering its growing role in sectors like education and its potential to exacerbate existing inequalities. Ultimately, the sources underscore the complex interplay between technological advancement and the crucial need for thoughtful governance and ethical considerations.

This podcast provides a root cause and thesis analysis of CVE-2025-0108, an authentication bypass vulnerability in Palo Alto Networks' PAN-OS software. The flaw allows unauthenticated attackers to execute specific PHP scripts due to discrepancies in how different web technologies handle requests. Exploitation details, similar past vulnerabilities like those in Fortinet FortiOS and Apache Struts, and relevant cybersecurity trends are examined. Mitigation strategies including patching and access restrictions are recommended. The report emphasizes the importance of comprehensive security reviews, robust development practices, and proactive security measures to combat evolving cyber threats. Ultimately, the analysis highlights the necessity of a multi-faceted approach to safeguard against vulnerabilities in network management systems.

In this advanced edition podcast episode, Senior Security Researcher delves into the intricate landscape of Active Directory security. The discussion covers sophisticated attack methodologies, practical lab exercises, and essential defensive techniques. Emphasizing a red team approach, listeners will gain insights into privilege escalation, trust abuse, and mitigation strategies, while understanding the critical role of Active Directory in managing Windows networks. This episode is aimed at those with foundational knowledge of Active Directory, seeking to enhance both their offensive capabilities and defensive posture in cybersecurity.

This podcast outlines potential security weaknesses within 5G networks. It highlights vulnerabilities such as trust exploitation between devices and base stations and weak initial message protection. The introduction of new 5G features like network slicing also brings increased risk by creating more points of potential attack. Implementation and configuration errors can also expose networks, exacerbated by the need to balance speed and security which can leave gaps in network defense. The article emphasizes the importance of understanding these risks to protect data privacy, prevent service disruptions, and mitigate financial and safety risks. It concludes by noting that improved protocols, updates, advanced threat detection and regulatory oversight are vital to address vulnerabilities.

A significant data breach at Mars Hydro, a manufacturer of IoT grow lights, exposed 2.7 billion records due to inadequate security measures. The unprotected database contained sensitive user information such as Wi-Fi passwords and IP addresses. Security flaws included a lack of encryption, password protection, and regular security audits. This breach highlights critical vulnerabilities within the Internet of Things (IoT) ecosystem, posing privacy and security risks to users and financial and reputational risks to businesses. Recommendations emphasize strong authentication, data encryption, and proactive security audits for manufacturers, alongside password updates and network segmentation for users. The incident underscores the urgent need for collaborative efforts to improve IoT security and protect user data.

In this episode, we delve into the concept of web session management, exploring how session identifiers and cookies operate to facilitate user interactions. We highlight the threats posed by session hijacking, including techniques like man-in-the-middle attacks, session fixation, and sidejacking. Tune in to learn practical measures to safeguard your online activities, such as avoiding public Wi-Fi and enabling multi-factor authentication.