Experimental News Clipping Site

Tag: human

  • Embrace The Red: Windsurf: Memory-Persistent Data Exfiltration (SpAIware Exploit)

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/windsurf-spaiware-exploit-persistent-prompt-injection/ Source: Embrace The Red Title: Windsurf: Memory-Persistent Data Exfiltration (SpAIware Exploit) Feedly Summary: In this second post about Windsurf Cascade we are exploring the SpAIware attack, which allows memory persistent data exfiltration. SpAIware is an attack we first successfully demonstrated with ChatGPT last year and OpenAI mitigated. While inspecting the system prompt…

  • The Register: Fake CAPTCHA tests trick users into running malware

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/22/clickfix_report/ Source: The Register Title: Fake CAPTCHA tests trick users into running malware Feedly Summary: ClickFix tricks Microsoft’s security team has published an in-depth report into ClickFix, the social engineering attack which tricks users into executing malicious commands in the guise of proving their humanity.… AI Summary and Description: Yes Summary: Microsoft’s security…

  • Microsoft Security Blog: Think before you Click(Fix): Analyzing the ClickFix social engineering technique

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/21/think-before-you-clickfix-analyzing-the-clickfix-social-engineering-technique/ Source: Microsoft Security Blog Title: Think before you Click(Fix): Analyzing the ClickFix social engineering technique Feedly Summary: The ClickFix social engineering technique has been growing in popularity, with campaigns targeting thousands of enterprise and end-user devices daily. This technique exploits users’ tendency to resolve technical issues by tricking them into running malicious…

  • Cloud Blog: How startups can help build — and benefit from — the AI revolution

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/ai-machine-learning/industry-leaders-on-whats-next-for-startups-and-ai/ Source: Cloud Blog Title: How startups can help build — and benefit from — the AI revolution Feedly Summary: Startups are at the forefront of generative AI development, pushing current capabilities and unlocking new potential. Building on our Future of AI: Perspectives for Startups 2025 report, several of the AI industry leaders…

  • Simon Willison’s Weblog: Quoting Mustafa Suleyman

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/21/mustafa-suleyman/ Source: Simon Willison’s Weblog Title: Quoting Mustafa Suleyman Feedly Summary: Simply put, my central worry is that many people will start to believe in the illusion of AIs as conscious entities so strongly that they’ll soon advocate for AI rights, model welfare and even AI citizenship. This development will be a dangerous…

  • Embrace The Red: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-interprets-hidden-instructions/ Source: Embrace The Red Title: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a very popular coding agent, with over 1 million downloads. In previous posts we showed how prompt injection vulnerabilities in Amazon Q could lead…

  • The Register: KPMG wrote 100-page prompt to build agentic TaxBot

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/20/kpmg_giant_prompt_tax_agent/ Source: The Register Title: KPMG wrote 100-page prompt to build agentic TaxBot Feedly Summary: Produces advice in a single day instead of two weeks – without job losses The Australian arm of consultancy firm KPMG wrote a 100-page prompt to create an agentic system that prepares tax advice far faster than humans.……

  • Shabie’s blog: Agents are search over action space

    —

    by

    Kurt Seifried
    in

    Source URL: https://shabie.github.io/2025/08/18/agents-are-search-over-action-space.html Source: Shabie’s blog Title: Agents are search over action space Feedly Summary: It’s no secret that today’s LLM-based agents are unreliable. This makes them a gamble for most critical tasks, so where can they be safely applied? The answer lies in finding asymmetry: we should use them in domains where the downside…