[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

reported (KrebsOnSecurity, Nov 4, quoting Layer3 Intel and Synthient research); the White House had not commented

Researchers found residential proxy services selling exits through the White House network (AS2650); 28 proxy services, 236 exits in a month

Proxy SDKs ride in on personal devices and free apps, and they let strangers send traffic from inside your network. To check your own:

  • Look in DNS and proxy logs for residential-proxy SDK domains (Spur, Synthient and Infoblox publish lists), and in EDR for known SDKs bundled with free VPNs, games and 'earn money' apps.
  • Check whether your egress IPs show up in residential proxy datasets.
  • Keep personal and BYOD devices on a separate network from managed endpoints and sensitive services.

Sources: KrebsOnSecurity: Want to Rent an Internet Address at the White House? (Nov 4)