Tag: day

Source URL: https://embracethered.com/blog/posts/2025/openhands-remote-code-execution-zombai/ Source: Embrace The Red Title: OpenHands ZombAI Exploit: Prompt Injection To Remote Code Execution Feedly Summary: Today we have another post about OpenHands from All Hands AI. It is a popular agent, initially named “OpenDevin”, and recently the company also provides a cloud-based service. Which is all pretty cool and exciting. Prompt…

The Register: The inside story of the Telemessage saga, and how you can view the data

Aug 10, 2025

—

by

Source URL: https://www.theregister.com/2025/08/10/telemessage_archive_online/ Source: The Register Title: The inside story of the Telemessage saga, and how you can view the data Feedly Summary: It turns out no one was clean on OPSEC DEF CON On Saturday at DEF CON, security boffin Micah Lee explained just how he hacked into TeleMessage, the supposedly secure messaging app…

Embrace The Red: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets

Aug 9, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/openhands-the-lethal-trifecta-strikes-again/ Source: Embrace The Red Title: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets Feedly Summary: Another day, another AI data exfiltration exploit. Today we talk about OpenHands, formerly referred to as OpenDevin initially. It’s created by All-Hands AI. OpenHands renders images in chat, which enables zero-click data exfiltration during prompt injection…

Simon Willison’s Weblog: My Lethal Trifecta talk at the Bay Area AI Security Meetup

Aug 9, 2025

—

by

Source URL: https://simonwillison.net/2025/Aug/9/bay-area-ai/#atom-everything Source: Simon Willison’s Weblog Title: My Lethal Trifecta talk at the Bay Area AI Security Meetup Feedly Summary: I gave a talk on Wednesday at the Bay Area AI Security Meetup about prompt injection, the lethal trifecta and the challenges of securing systems that use MCP. It wasn’t recorded but I’ve created…

The Register: Meet President Willian H. Brusen from the great state of Onegon

—

by

Source URL: https://www.theregister.com/2025/08/08/gpt-5-fake-presidents-states/ Source: The Register Title: Meet President Willian H. Brusen from the great state of Onegon Feedly Summary: LLMs still struggle with accurate text within graphics hands on OpenAI’s GPT-5, unveiled on Thursday, is supposed to be the company’s flagship model, offering better reasoning and more accurate responses than previous-gen products. But when…

Simon Willison’s Weblog: Quoting Sam Altman

—

by

Source URL: https://simonwillison.net/2025/Aug/8/sam-altman/#atom-everything Source: Simon Willison’s Weblog Title: Quoting Sam Altman Feedly Summary: GPT-5 rollout updates: We are going to double GPT-5 rate limits for ChatGPT Plus users as we finish rollout. We will let Plus users choose to continue to use 4o. We will watch usage as we think about how long to offer…

Simon Willison’s Weblog: The surprise deprecation of GPT-4o for ChatGPT consumers

—

by

Source URL: https://simonwillison.net/2025/Aug/8/surprise-deprecation-of-gpt-4o/#atom-everything Source: Simon Willison’s Weblog Title: The surprise deprecation of GPT-4o for ChatGPT consumers Feedly Summary: I’ve been dipping into the r/ChatGPT subreddit recently to see how people are reacting to the GPT-5 launch, and so far the vibes there are not good. This AMA thread with the OpenAI team is a great…

Tomasz Tunguz: From Knowledge to Action

—

by

Source URL: https://www.tomtunguz.com/gpt5-tool-calling-revolution/ Source: Tomasz Tunguz Title: From Knowledge to Action Feedly Summary: GPT-5 launched yesterday. 94.6% on AIME 2025. 74.9% on SWE-bench. As we approach the upper bounds of these benchmarks, they die. What makes GPT-5 and the next generation of models revolutionary isn’t their knowledge. It’s knowing how to act. For GPT-5 this…

Cloud Blog: Looker debuts MCP Server to broaden AI developer access to data

—

by