Tag: exploit

Source URL: https://www.nytimes.com/2025/08/11/technology/personaltech/ai-kids-photos.html Source: New York Times – Artificial Intelligence Title: Why A.I. Should Make Parents Rethink Posting Photos of Their Children Online Feedly Summary: Artificial intelligence apps generating fake nudes, amid other privacy concerns, make “sharenting” far riskier than it was just a few years ago. AI Summary and Description: Yes Summary: The text…

Simon Willison’s Weblog: Chromium Docs: The Rule Of 2

Aug 11, 2025

—

by

Source URL: https://simonwillison.net/2025/Aug/11/the-rule-of-2/ Source: Simon Willison’s Weblog Title: Chromium Docs: The Rule Of 2 Feedly Summary: Chromium Docs: The Rule Of 2 Alex Russell pointed me to this principle in the Chromium security documentation as similar to my description of the lethal trifecta. First added in 2019, the Chromium guideline states: When you write code…

The Register: Trend Micro offers weak workaround for already-exploited critical vuln in management console

Aug 10, 2025

—

by

Source URL: https://www.theregister.com/2025/08/10/infosec_in_brief/ Source: The Register Title: Trend Micro offers weak workaround for already-exploited critical vuln in management console Feedly Summary: PLUS: Crypto mixer founders plead guilty; Another French telco hacked; Meta fights WhatsApp scams; And more! Infosec In Brief A critical vulnerability in the on-prem version of Trend Micro’s Apex One endpoint security platform…

Embrace The Red: OpenHands ZombAI Exploit: Prompt Injection To Remote Code Execution

Aug 10, 2025

—

by

Source URL: https://embracethered.com/blog/posts/2025/openhands-remote-code-execution-zombai/ Source: Embrace The Red Title: OpenHands ZombAI Exploit: Prompt Injection To Remote Code Execution Feedly Summary: Today we have another post about OpenHands from All Hands AI. It is a popular agent, initially named “OpenDevin”, and recently the company also provides a cloud-based service. Which is all pretty cool and exciting. Prompt…

Cisco Talos Blog: ReVault! When your SoC turns against you… deep dive edition

—

by

Source URL: https://blog.talosintelligence.com/revault-when-your-soc-turns-against-you-2/ Source: Cisco Talos Blog Title: ReVault! When your SoC turns against you… deep dive edition Feedly Summary: Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”. AI Summary and Description: Yes **Summary:** The text conducts an in-depth analysis…

Embrace The Red: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets

—

by

Source URL: https://embracethered.com/blog/posts/2025/openhands-the-lethal-trifecta-strikes-again/ Source: Embrace The Red Title: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets Feedly Summary: Another day, another AI data exfiltration exploit. Today we talk about OpenHands, formerly referred to as OpenDevin initially. It’s created by All-Hands AI. OpenHands renders images in chat, which enables zero-click data exfiltration during prompt injection…

AlgorithmWatch: The AI Revolution Comes With the Exploitation of Gig Workers

—

by

Source URL: https://algorithmwatch.org/en/ai-revolution-exploitation-gig-workers/ Source: AlgorithmWatch Title: The AI Revolution Comes With the Exploitation of Gig Workers Feedly Summary: Business process outsourcing (BPO) companies manage the human work behind AI development. However, they face accusations of worker exploitation, underpayment and wage theft. Big tech companies benefit from this work model. AI Summary and Description: Yes **Summary**:…

Simon Willison’s Weblog: When a Jira Ticket Can Steal Your Secrets

—

by

Source URL: https://simonwillison.net/2025/Aug/9/when-a-jira-ticket-can-steal-your-secrets/ Source: Simon Willison’s Weblog Title: When a Jira Ticket Can Steal Your Secrets Feedly Summary: When a Jira Ticket Can Steal Your Secrets Zenity Labs describe a classic lethal trifecta attack, this time against Cursor, MCP, Jira and Zendesk. They also have a short video demonstrating the issue. Zendesk support emails are…

Simon Willison’s Weblog: My Lethal Trifecta talk at the Bay Area AI Security Meetup

—

by