Tag: awareness
-
Embrace The Red: Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets
Source URL: https://embracethered.com/blog/posts/2025/windsurf-data-exfiltration-vulnerabilities/ Source: Embrace The Red Title: Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets Feedly Summary: This is the first post in a series exploring security vulnerabilities in Windsurf. If you are unfamiliar with Windsurf, it is a fork of VS Code and the coding agent is called Windsurf Cascade. The attack vectors…
-
The Register: Perplexity’s Comet browser naively processed pages with evil instructions
Source URL: https://www.theregister.com/2025/08/20/perplexity_comet_browser_prompt_injection/ Source: The Register Title: Perplexity’s Comet browser naively processed pages with evil instructions Feedly Summary: Rival Brave flags prompt injection vulnerability, now patched To the surprise of no one in the security industry, processing untrusted, unvalidated input is a bad idea.… AI Summary and Description: Yes Summary: The text discusses a recently…
-
Embrace The Red: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection
Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-interprets-hidden-instructions/ Source: Embrace The Red Title: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a very popular coding agent, with over 1 million downloads. In previous posts we showed how prompt injection vulnerabilities in Amazon Q could lead…
-
Krebs on Security: Oregon Man Charged in ‘Rapper Bot’ DDoS Service
Source URL: https://krebsonsecurity.com/2025/08/oregon-man-charged-in-rapper-bot-ddos-service/ Source: Krebs on Security Title: Oregon Man Charged in ‘Rapper Bot’ DDoS Service Feedly Summary: A 22-year-old Oregon man has been arrested on suspicion of operating “Rapper Bot," a massive botnet used to power a service for launching distributed denial-of-service (DDoS) attacks against targets — including a March 2025 DDoS that knocked…
-
Embrace The Red: Amp Code: Invisible Prompt Injection Fixed by Sourcegraph
Source URL: https://embracethered.com/blog/posts/2025/amp-code-fixed-invisible-prompt-injection/ Source: Embrace The Red Title: Amp Code: Invisible Prompt Injection Fixed by Sourcegraph Feedly Summary: In this post we will look at Amp, a coding agent from Sourcegraph. The other day we discussed how invisible instructions impact Google Jules. Turns out that many client applications are vulnerable to these kinds of attacks…
-
Slashdot: Illinois Bans AI Therapy, Joins Two Other States in Regulating Chatbots
Source URL: https://news.slashdot.org/story/25/08/16/0434221/illinois-bans-ai-therapy-joins-two-other-states-in-regulating-chatbots?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Illinois Bans AI Therapy, Joins Two Other States in Regulating Chatbots Feedly Summary: AI Summary and Description: Yes Summary: The text discusses recent legislative actions in Illinois and other states to regulate the use of artificial intelligence in mental health therapy. This highlights growing concerns about the safety and…