Tag: code execution

Source URL: https://embracethered.com/blog/posts/2025/openhands-remote-code-execution-zombai/ Source: Embrace The Red Title: OpenHands ZombAI Exploit: Prompt Injection To Remote Code Execution Feedly Summary: Today we have another post about OpenHands from All Hands AI. It is a popular agent, initially named “OpenDevin”, and recently the company also provides a cloud-based service. Which is all pretty cool and exciting. Prompt…

Docker: MCP Horror Stories: The Supply Chain Attack

Aug 7, 2025

—

by

Source URL: https://www.docker.com/blog/mcp-horror-stories-the-supply-chain-attack/ Source: Docker Title: MCP Horror Stories: The Supply Chain Attack Feedly Summary: This is Part 2 of our MCP Horror Stories series, an in-depth look at real-world security incidents exposing the vulnerabilities in AI infrastructure, and how the Docker MCP Toolkit delivers enterprise-grade protection. The Model Context Protocol (MCP) promised to be…

The Cloudflare Blog: Partnering with OpenAI to bring their new open models onto Cloudflare Workers AI

Aug 6, 2025

—

by

Source URL: https://blog.cloudflare.com/openai-gpt-oss-on-workers-ai/ Source: The Cloudflare Blog Title: Partnering with OpenAI to bring their new open models onto Cloudflare Workers AI Feedly Summary: OpenAI’s newest open-source models are now available on Cloudflare Workers AI on Day 0, with support for Responses API, Code Interpreter and Web Search (coming soon). AI Summary and Description: Yes **Short…

Embrace The Red: I Spent $500 To Test Devin For Prompt Injection So That You Don’t Have To

Aug 6, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/devin-i-spent-usd500-to-hack-devin/ Source: Embrace The Red Title: I Spent $500 To Test Devin For Prompt Injection So That You Don’t Have To Feedly Summary: Today we cover Devin from Cognition, the first AI Software Engineer. We will cover Devin proof-of-concept exploits in multiple posts over the next few days. In this first post, we…

The Register: Vibe coding tool Cursor’s MCP implementation allows persistent code execution

—

by

Source URL: https://www.theregister.com/2025/08/05/mcpoison_bug_abuses_cursor_mcp/ Source: The Register Title: Vibe coding tool Cursor’s MCP implementation allows persistent code execution Feedly Summary: More evidence that AI expands the attack surface Check Point researchers uncovered a remote code execution bug in popular vibe-coding AI tool Cursor that could allow an attacker to poison developer environments by secretly modifying a…

Slashdot: OpenAI Releases First Open-Weight Models Since GPT-2

—

by

Source URL: https://slashdot.org/story/25/08/05/1848236/openai-releases-first-open-weight-models-since-gpt-2?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: OpenAI Releases First Open-Weight Models Since GPT-2 Feedly Summary: AI Summary and Description: Yes Summary: OpenAI’s release of two open-weight language models, gpt-oss-120b and gpt-oss-20b, marks a significant development in the AI landscape since 2019. These models enable local deployment on consumer devices and introduce advanced capabilities such as…

The Register: Chained bugs in Nvidia’s Triton Inference Server lead to full system compromise

—

by

Source URL: https://www.theregister.com/2025/08/05/nvidia_triton_bug_chain/ Source: The Register Title: Chained bugs in Nvidia’s Triton Inference Server lead to full system compromise Feedly Summary: Wiz Research details flaws in Python backend that expose AI models and enable remote code execution Security researchers have lifted the lid on a chain of high-severity vulnerabilities that could lead to remote code…

Cisco Talos Blog: ReVault! When your SoC turns against you…

—

by

Source URL: https://blog.talosintelligence.com/revault-when-your-soc-turns-against-you/ Source: Cisco Talos Blog Title: ReVault! When your SoC turns against you… Feedly Summary: Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”. AI Summary and Description: Yes **Summary:** The report details significant vulnerabilities discovered in Dell’s ControlVault3…

Docker: MCP Horror Stories: The Security Issues Threatening AI Infrastructure

Jul 31, 2025

—

by