March 2023

The 3CX Supply-Chain Attack: When Signed Updates Turn

Post author:Prabhu Kalyan Samal
Post published:March 29, 2023
Post category:AI & Agent Security Security Supply Chain Security

3CX's signed desktop app shipped a trojan after its build pipeline fell to an upstream vendor compromise — the first documented double supply-chain attack.

SVB’s Collapse: When Banking Becomes a Security Problem

Post author:Prabhu Kalyan Samal
Post published:March 25, 2023
Post category:Emerging Tech & Architecture Security

SVB's March 2023 run froze payroll for half of venture-backed tech and minted a fraud wave targeting displaced customers. Treasury continuity lessons.

The ChatGPT Redis Bug: Cross-Tenant Leaks in One Line

Post author:Prabhu Kalyan Samal
Post published:March 24, 2023
Post category:AI & Agent Security Cloud & Infrastructure Security

A redis-py cancellation bug plus a disabled key-prefix let some ChatGPT users see strangers' chat titles and billing data. Multi-tenant cache lessons.

Bing Chat’s Sydney: The System Prompt Extraction Era

Post author:Prabhu Kalyan Samal
Post published:March 18, 2023
Post category:AI & Agent Security Security

Researchers pulled Bing Chat's hidden rules with polite overrides, revealing the codename Sydney and confidential guidelines. Prompt-injection's big bang.