Tag: GitHub

—

by

Source URL: https://simonwillison.net/2025/Sep/24/cross-agent-privilege-escalation/ Source: Simon Willison’s Weblog Title: Cross-Agent Privilege Escalation: When Agents Free Each Other Feedly Summary: Cross-Agent Privilege Escalation: When Agents Free Each Other Here’s a clever new form of AI exploit from Johann Rehberger, who has coined the term Cross-Agent Privilege Escalation to describe an attack where multiple coding agents – GitHub…

Embrace The Red: Cross-Agent Privilege Escalation: When Agents Free Each Other

—

by

Source URL: https://embracethered.com/blog/posts/2025/cross-agent-privilege-escalation-agents-that-free-each-other/ Source: Embrace The Red Title: Cross-Agent Privilege Escalation: When Agents Free Each Other Feedly Summary: During the Month of AI Bugs, I described an emerging vulnerability pattern that shows how commonly agentic systems have a design flaw that allows an agent to overwrite its own configuration and security settings. This allows the…

Cloud Blog: Launching Gemini CLI extensions for Google Data Cloud

—

by

Source URL: https://cloud.google.com/blog/products/databases/gemini-cli-extensions-for-google-data-cloud/ Source: Cloud Blog Title: Launching Gemini CLI extensions for Google Data Cloud Feedly Summary: In June, Google introduced Gemini CLI, an open-source AI agent that brings the power of Gemini directly into your terminal. And today, we’re excited to announce open-source Gemini CLI extensions for Google Data Cloud services. Building applications and…

Cloud Blog: Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/brickstorm-espionage-campaign/ Source: Cloud Blog Title: Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors Feedly Summary: Written by: Sarah Yoder, John Wolfram, Ashley Pearson, Doug Bienstock, Josh Madeley, Josh Murchie, Brad Slaybaugh, Matt Lin, Geoff Carstairs, Austin Larsen Introduction Google Threat Intelligence Group (GTIG) is tracking BRICKSTORM malware activity, which is…

Simon Willison’s Weblog: GPT-5-Codex

—

by

Source URL: https://simonwillison.net/2025/Sep/23/gpt-5-codex/#atom-everything Source: Simon Willison’s Weblog Title: GPT-5-Codex Feedly Summary: GPT-5-Codex OpenAI half-relased this model earlier this month, adding it to their Codex CLI tool but not their API. Today they’ve fixed that – the new model can now be accessed as gpt-5-codex. It’s priced the same as regular GPT-5: $1.25/million input tokens, $10/million…

Cloud Blog: AI Innovators: How JAX on TPU is helping Escalante advance AI-driven protein design

Sep 23, 2025

—

by

Source URL: https://cloud.google.com/blog/topics/customers/escalante-uses-jax-on-tpus-for-ai-driven-protein-design/ Source: Cloud Blog Title: AI Innovators: How JAX on TPU is helping Escalante advance AI-driven protein design Feedly Summary: As a Python library for accelerator-oriented array computation and program transformation, JAX is widely recognized for its power in training large-scale AI models. But its core design as a system for composable function…

The Cloudflare Blog: Deploy your own AI vibe coding platform — in one click!

Sep 23, 2025

—

by

Source URL: https://blog.cloudflare.com/deploy-your-own-ai-vibe-coding-platform/ Source: The Cloudflare Blog Title: Deploy your own AI vibe coding platform — in one click! Feedly Summary: Introducing VibeSDK, an open-source AI “vibe coding" platform that anyone can deploy to build their own custom platform. Comes ready with code generation, sandbox environment, and project deployment. AI Summary and Description: Yes **Summary:**…

The Register: GitHub moves to tighten npm security amid phishing, malware plague

Sep 23, 2025

—

by

Source URL: https://www.theregister.com/2025/09/23/github_npm_registry_security/ Source: The Register Title: GitHub moves to tighten npm security amid phishing, malware plague Feedly Summary: Hundreds of compromised packages pulled as registry shifts to 2FA and trusted publishing GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.… AI Summary and Description:…

Simon Willison’s Weblog: Four new releases from Qwen

Sep 22, 2025

—

by