kerng

7 ms·

1.
by kerng 2mo ago
What happened here is not related to agentic behavior or instructions in .md files. It's a binary a user runs, it scoops up their files and sends them to a third-party. And the user even paid $99/month or more for having their dat
2.
Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)(embracethered.com)
2 points by kerng 5mo ago|0 comments
3.
The AI-Assisted Breach of Mexico's Government Infrastructure [pdf](cdn.prod.website-files.com)
6 points by kerng 5mo ago|0 comments
4.
by kerng 11mo ago
Not the first time by the way. GitHub Copilot Chat: From Prompt Injection to Data Exfiltration https://embracethered.com/blog/posts/2024/github-copilot-cha...
5.
GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)(embracethered.com)
128 points by kerng 11mo ago|18 comments
6.
Machine Learning Attack Series: Image Scaling Attacks (2020)(embracethered.com)
3 points by kerng 11mo ago|0 comments
7.
Month of AI Bugs (August 2025)(monthofaibugs.com)
3 points by kerng 11mo ago|0 comments
8.
Cross-Agent Privilege Escalation: When Agents Free Each Other(embracethered.com)
3 points by kerng 1y ago|0 comments
9.
AgentHopper: An AI Virus(embracethered.com)
6 points by kerng 1y ago|0 comments
10.
Amazon Q Developer: Remote Code Execution with Prompt Injection(embracethered.com)
2 points by kerng 1y ago|0 comments
11.
AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection(embracethered.com)
5 points by kerng 1y ago|0 comments
12.
Amazon Q Developer for VS Code: Remote Code Execution with Prompt Injection(embracethered.com)
5 points by kerng 1y ago|1 comments
13.
GitHub Copilot: Remote code execution via prompt injection (CVE-2025-53773)(embracethered.com)
15 points by kerng 1y ago|2 comments
14.
I Spent $500 to Test Devin for Prompt Injection So That You Don't Have To(embracethered.com)
4 points by kerng 1y ago|0 comments
15.
Cursor IDE: Arbitrary Data Exfiltration via Mermaid (CVE-2025-54132)(embracethered.com)
4 points by kerng 1y ago|0 comments
16.
by kerng 1y ago
When I read about MCP the first time and saw that it requires a "tools/list" API reminded me of COM/DCOM/ActiveX from Microsoft, it had things like QueryInterface and IDispatch. And I'm sure that wasn't th
17.
Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltration(embracethered.com)
5 points by kerng 1y ago|0 comments
18.
Hosting COM Servers with an MCP Server (AI-Powered Office Automation)(embracethered.com)
3 points by kerng 1y ago|0 comments
19.
AI ClickFix: Hijacking Computer-Use Agents(embracethered.com)
4 points by kerng 1y ago|0 comments
20.
ChatGPT: Dump all your memories and chat history for inspection(twitter.com)
3 points by kerng 1y ago|0 comments
21.
Latest Gemini models now follow invisible Unicode Tag instructions(twitter.com)
5 points by kerng 1y ago|0 comments
22.
Sneaky Bits: Advanced Data Smuggling using just two invisible Unicode characters(embracethered.com)
2 points by kerng 2y ago|0 comments
23.
ChatGPT Operator: Prompt Injection Exploits and Defenses(embracethered.com)
5 points by kerng 2y ago|0 comments
24.
Security ProbLLMs in XAI's Grok: A Deep Dive(embracethered.com)
1 points by kerng 2y ago|0 comments
25.
How to Find XSS in 2024(twitter.com)
3 points by kerng 2y ago|0 comments
26.
Spyware Injection into ChatGPT's Long-Term Memory (SpAIware)(embracethered.com)
5 points by kerng 2y ago|0 comments
27.
Microsoft Copilot: Prompt Injection, ASCII Smuggling and Exfiltration of Emails(embracethered.com)
3 points by kerng 2y ago|0 comments
28.
Google Colab AI: Data Leakage Fixed. Some Risks Remain(embracethered.com)
5 points by kerng 2y ago|0 comments
29.
Breaking Instruction Hierarchy in OpenAI's GPT-4o-mini(embracethered.com)
3 points by kerng 2y ago|0 comments
30.
Prompt Injections in the Wild – Exploiting LLM Agents – Hitcon 2023 [video](youtube.com)
3 points by kerng 2y ago|0 comments

More ›