Tag: analysis

  • Embrace The Red: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132)

    Source URL: https://embracethered.com/blog/posts/2025/cursor-data-exfiltration-with-mermaid/ Source: Embrace The Red Title: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132) Feedly Summary: Cursor is a popular AI code editor. In this post I want to share how I found an interesting data exfiltration issue, the demo exploits built and how it got fixed. When using Cursor I noticed that…

  • Simon Willison’s Weblog: The ChatGPT sharing dialog demonstrates how difficult it is to design privacy preferences

    Source URL: https://simonwillison.net/2025/Aug/3/privacy-design/ Source: Simon Willison’s Weblog Title: The ChatGPT sharing dialog demonstrates how difficult it is to design privacy preferences Feedly Summary: ChatGPT just removed their “make this chat discoverable" sharing feature, after it turned out a material volume of users had inadvertantly made their private chats available via Google search. Dane Stuckey, CISO…

  • Simon Willison’s Weblog: XBai o4

    Source URL: https://simonwillison.net/2025/Aug/3/xbai-o4/#atom-everything Source: Simon Willison’s Weblog Title: XBai o4 Feedly Summary: XBai o4 Yet another open source (Apache 2.0) LLM from a Chinese AI lab. This model card claims: XBai o4 excels in complex reasoning capabilities and has now completely surpassed OpenAI-o3-mini in Medium mode. This a 32.8 billion parameter model released by MetaStone…

  • The Register: Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

    Source URL: https://www.theregister.com/2025/08/01/microsoft_recall_captures_credit_card_info/ Source: The Register Title: Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks Feedly Summary: Our tests have shown there are ways to get around the promised security improvements exclusive Microsoft Recall, the AI app that takes screenshots of what you do on your PC so…

  • Embrace The Red: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection

    Source URL: https://embracethered.com/blog/posts/2025/chatgpt-chat-history-data-exfiltration/ Source: Embrace The Red Title: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection Feedly Summary: In this post we demonstrate how a bypass in OpenAI’s “safe URL” rendering feature allows ChatGPT to send personal information to a third-party server. This can be exploited by an adversary via a prompt injection…

  • Cloud Blog: Introducing audit-only mode for Access Transparency

    Source URL: https://cloud.google.com/blog/products/identity-security/introducing-audit-only-mode-for-access-transparency/ Source: Cloud Blog Title: Introducing audit-only mode for Access Transparency Feedly Summary: As part of our commitment to cloud workload security and transparency, today, we’re introducing a new, lightweight audit-only mode for Access Approval to enable access approvals in an “on demand only” model. This new capability is available at no extra…

  • The Cloudflare Blog: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME)

    Source URL: https://blog.cloudflare.com/vulnerability-disclosure-on-ssl-for-saas-v1-managed-cname/ Source: The Cloudflare Blog Title: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME) Feedly Summary: An upcoming vulnerability disclosure in Cloudflare’s SSL for SaaSv1 is detailed, explaining the steps we’ve taken towards deprecation. AI Summary and Description: Yes Summary: The text discusses a vulnerability discovered in Cloudflare’s SSL for SaaS v1…

  • Tomasz Tunguz: The AI-Driven Cloud Market Share Shift

    Source URL: https://www.tomtunguz.com/cloud-market-share-shift-2025/ Source: Tomasz Tunguz Title: The AI-Driven Cloud Market Share Shift Feedly Summary: What force could dethrone AWS after more than a decade of unchallenged dominance? For years, Amazon Web Services ruled the cloud infrastructure market. It was the default choice without a question for every startup. Then OpenAI released GPT-4. Microsoft’s exclusive…

  • Shabie’s blog: Let the kaleidoscope turn

    Source URL: https://shabie.github.io/2025/07/31/let-the-kaleidoscope-turn.html Source: Shabie’s blog Title: Let the kaleidoscope turn Feedly Summary: “Any good classifier knows that in the process of classification, information about variety is lost while information about similarities is gained.” – Joseph Tainter AI Summary and Description: Yes Summary: The text discusses the limitations of traditional retrieval-augmented generation (RAG) systems in…