status.blaise.ca
type: Site
name: stadeus
space of: friday

friday
type: Container
type: channel
description: Updates tagged with friday on stadeus!
licence: http://creativecommons.org/licenses/by/3.0/
items: cybersecurity-friday-small-business
items: cmhobbs: Making one last attempt to get my son to move to a cooler room to sleep and then passing out, myself. Good !tzaf, !fediverse. Tomorrow is #friday!
items: cmhobbs: Time to get a little #exercise, a little !coffee, and then I'll decide if I'm going to work from hom https://loadaverage.org/notice/6994932

cybersecurity-friday-small-business
type: item
type: MicroblogPost
title: : CSF_03: today’s Cybersecurity Friday post: the effective security of small business websites has likely gotten worse due to LLMs and “AI agents” (with or without safeguards) and what actions you may want to consider.This article documents an instance of this problem:* https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986Small business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should.In the past, many of these holes didn’t really matter because those sites were “not worth attacking” for the incentive models of human-based cyber-attackers or collectives thereof.However, now that there are LLMs that have likely been trained on any number of common security holes in websites (and how to exploit them), when an “AI agent” is given a task, it may very well use any “tool” at its disposal, including website vulnerabilities to accomplish its goals, as illustrated by the example in the Australia ABC news article above.Since such chatbots are now essentially "hack websites as a service", I expect we will see LOTS more of this happening, likely unintentionally, or sometimes with mild intention like “can you get me higher on the waitlist”.Ultimately I think both the human giving instructions to (prompting) such chatbots and the creators of such chatbots should be held responsible for any such intrusions and any damage they cause, even if/when unintended.There are a few things you can do about this emerging phenomenon:1…
link: https://status.blaise.ca/notice/116336
description: 's status on Friday, 14-Aug-2026 16:41:00 EDT
encoded: CSF_03: today’s Cybersecurity Friday post: the effective security of small business websites has likely gotten worse due to LLMs and “AI agents” (with or without safeguards) and what actions you may want to consider. This article documents an instance of this problem: * https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986 Small business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should. In the past, many of these holes didn’t really matter because those sites were “not worth attacking” for the incentive models of human-based cyber-attackers or collectives thereof. However, now that there are LLMs that have likely been trained on any number of common security holes in websites (and how to exploit them), when an “AI agent” is given a task, it may very well use any “tool” at its disposal, including website vulnerabilities to accomplish its goals, as illustrated by the example in the Australia ABC news article above. Since such chatbots are now essentially "hack websites as a service", I expect we will see LOTS more of this happening, likely unintentionally, or sometimes with mild intention like “can you get me higher on the waitlist”. Ultimately I think both the human giving instructions to (prompting) such chatbots and the creators of such chatbots should be held responsible for any such intrusions and any damage they cause, even if/when unintended. There are a few things you can do about this emerging phenom…
date: 2026-08-14T16:41:00-04:00
creator: Tantek
has creator: acct
licence: http://creativecommons.org/licenses/by/3.0/
has discussion: https://status.blaise.ca/conversation/110399
enclosure: CyberSecurity
links to: CyberSecurity
enclosure: 107007986Small
links to: 107007986Small
enclosure: more-steps-indieweb-cybersecurity
links to: more-steps-indieweb-cybersecurity
tagged: concept

CyberSecurity
date: 2025-05-07T16:41:17-04:00
type: text/html; charset=UTF-8

107007986Small
date: 2026-08-15T04:50:11-04:00
length: 144525
type: text/html; charset=utf-8

more-steps-indieweb-cybersecurity
date: 2026-08-15T04:50:12-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: agent

concept
type: Tag
label: agents

concept
type: Tag
label: ai

concept
type: Tag
label: aiagent

concept
type: Tag
label: aiagents

concept
type: Tag
label: blaugust2026

concept
type: Tag
label: chatbot

concept
type: Tag
label: chatbots

concept
type: Tag
label: cyber

concept
type: Tag
label: cyberattack

concept
type: Tag
label: cyberattacker

concept
type: Tag
label: friday

concept
type: Tag
label: llm

concept
type: Tag
label: llms

concept
type: Tag
label: security

cmhobbs: Making one last attempt to get my son to move to a cooler room to sleep and then passing out, myself. Good !tzaf, !fediverse. Tomorrow is #friday!
type: item
type: MicroblogPost
link: https://status.blaise.ca/notice/65133
description: cmhobbs's status on Friday, 11-Sep-2015 00:15:37 EDT
encoded: Making one last attempt to get my son to move to a cooler room to sleep and then passing out, myself. Good !tzaf, !fediverse. Tomorrow is #friday!
date: 2015-09-11T00:15:37-04:00
creator: Christopher M. Hobbs
has creator: acct
licence: http://creativecommons.org/licenses/by/3.0/
has discussion: https://status.blaise.ca/conversation/65133
tagged: concept

cmhobbs: Time to get a little #exercise, a little !coffee, and then I'll decide if I'm going to work from hom https://loadaverage.org/notice/6994932
type: item
type: MicroblogPost
link: https://status.blaise.ca/notice/59570
description: cmhobbs's status on Friday, 19-Jun-2015 09:03:47 EDT
encoded: Time to get a little #exercise, a little !coffee, and then I'll decide if I'm going to work from hom…
date: 2015-06-19T09:03:47-04:00
creator: Christopher M. Hobbs
has creator: acct
licence: http://creativecommons.org/licenses/by/3.0/
has discussion: https://status.blaise.ca/conversation/50078
enclosure: cmhobbs-20150619T130413-8vbjp6v.html
links to: cmhobbs-20150619T130413-8vbjp6v.html
tagged: concept

cmhobbs-20150619T130413-8vbjp6v.html
date: 2015-06-25T10:49:21-04:00
length: 838
type: text/html

concept
type: Tag
label: exercise

Christopher M. Hobbs
type: Agent
nick: cmhobbs
holds account: acct