Experimental News Clipping Site

Tag: code

  • Simon Willison’s Weblog: Cross-Agent Privilege Escalation: When Agents Free Each Other

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Sep/24/cross-agent-privilege-escalation/ Source: Simon Willison’s Weblog Title: Cross-Agent Privilege Escalation: When Agents Free Each Other Feedly Summary: Cross-Agent Privilege Escalation: When Agents Free Each Other Here’s a clever new form of AI exploit from Johann Rehberger, who has coined the term Cross-Agent Privilege Escalation to describe an attack where multiple coding agents – GitHub…

  • Embrace The Red: Cross-Agent Privilege Escalation: When Agents Free Each Other

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/cross-agent-privilege-escalation-agents-that-free-each-other/ Source: Embrace The Red Title: Cross-Agent Privilege Escalation: When Agents Free Each Other Feedly Summary: During the Month of AI Bugs, I described an emerging vulnerability pattern that shows how commonly agentic systems have a design flaw that allows an agent to overwrite its own configuration and security settings. This allows the…

  • Microsoft Security Blog: Retail at risk: How one alert uncovered a persistent cyberthreat​​

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/09/24/retail-at-risk-how-one-alert-uncovered-a-persistent-cyberthreat/ Source: Microsoft Security Blog Title: Retail at risk: How one alert uncovered a persistent cyberthreat​​ Feedly Summary: In the latest edition of our Cyberattack Series, we dive into real-world cases targeting retail organizations. With 60% of retail companies reporting operational disruptions from cyberattacks and 43% experiencing breaches in the past year, the stakes…

  • Cloud Blog: Meet the new GKE: Extending Autopilot to all qualifying clusters

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/containers-kubernetes/gke-autopilot-now-available-to-all-qualifying-clusters/ Source: Cloud Blog Title: Meet the new GKE: Extending Autopilot to all qualifying clusters Feedly Summary: Autopilot is an operational mode for Google Kubernetes Engine (GKE) that provides a fully managed environment and takes care of operational details, like provisioning compute capacity for your workloads. Autopilot allows you to spend more time…

  • Gemini: Google AI Pro and Ultra subscribers now get Gemini CLI and Gemini Code Assist with higher limits.

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.google/technology/developers/gemini-cli-code-assist-higher-limits/ Source: Gemini Title: Google AI Pro and Ultra subscribers now get Gemini CLI and Gemini Code Assist with higher limits. Feedly Summary: Google AI Pro and Ultra subscribers now get higher limits to Gemini CLI and Gemini Code Assist IDE extensions. AI Summary and Description: Yes Summary: Google has made an update…

  • Cloud Blog: The new data scientist: From analyst to agentic architect

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/data-analytics/enabling-data-scientists-to-become-agentic-architects/ Source: Cloud Blog Title: The new data scientist: From analyst to agentic architect Feedly Summary: The role of the data scientist is rapidly transforming. For the past decade, their mission has centered on analyzing the past to run predictive models that informed business decisions. Today, that is no longer enough. The market…

  • Microsoft Security Blog: AI vs. AI: Detecting an AI-obfuscated phishing campaign

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/09/24/ai-vs-ai-detecting-an-ai-obfuscated-phishing-campaign/ Source: Microsoft Security Blog Title: AI vs. AI: Detecting an AI-obfuscated phishing campaign Feedly Summary: Microsoft Threat Intelligence recently detected and blocked a credential phishing campaign that likely used AI-generated code to obfuscate its payload and evade traditional defenses, demonstrating a broader trend of attackers leveraging AI to increase the effectiveness of…

  • Simon Willison’s Weblog: GPT-5-Codex

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Sep/23/gpt-5-codex/#atom-everything Source: Simon Willison’s Weblog Title: GPT-5-Codex Feedly Summary: GPT-5-Codex OpenAI half-relased this model earlier this month, adding it to their Codex CLI tool but not their API. Today they’ve fixed that – the new model can now be accessed as gpt-5-codex. It’s priced the same as regular GPT-5: $1.25/million input tokens, $10/million…