Experimental News Clipping Site

Tag: injection

  • Embrace The Red: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/chatgpt-chat-history-data-exfiltration/ Source: Embrace The Red Title: Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection Feedly Summary: In this post we demonstrate how a bypass in OpenAI’s “safe URL” rendering feature allows ChatGPT to send personal information to a third-party server. This can be exploited by an adversary via a prompt injection…

  • Docker: MCP Horror Stories: The Security Issues Threatening AI Infrastructure

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/mcp-security-issues-threatening-ai-infrastructure/ Source: Docker Title: MCP Horror Stories: The Security Issues Threatening AI Infrastructure Feedly Summary: This is issue 1 of a new series – MCP Horror Stories – where we will examine critical security issues and vulnerabilities in the Model Context Protocol (MCP) ecosystem and how Docker MCP Toolkit provides enterprise-grade protection against…

  • Cisco Talos Blog: Using LLMs as a reverse engineering sidekick

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/using-llm-as-a-reverse-engineering-sidekick/ Source: Cisco Talos Blog Title: Using LLMs as a reverse engineering sidekick Feedly Summary: LLMs may serve as powerful assistants to malware analysts to streamline workflows, enhance efficiency, and provide actionable insights during malware analysis.  AI Summary and Description: Yes **Summary:** The text provides an in-depth analysis of using Large Language Models…

  • CSA: How to Spot and Stop E-Skimming

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.vikingcloud.com/blog/how-to-spot-and-stop-e-skimming-before-it-hijacks-your-customers–and-your-credibility Source: CSA Title: How to Spot and Stop E-Skimming Feedly Summary: AI Summary and Description: Yes Summary: The text explores the growing threat of e-skimming attacks on e-commerce platforms, detailing how cybercriminals exploit JavaScript injections to harvest payment data. It emphasizes the critical need for compliance with PCI DSS v4.x to mitigate…

  • Simon Willison’s Weblog: Quoting ICML 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/23/icml-2025/#atom-everything Source: Simon Willison’s Weblog Title: Quoting ICML 2025 Feedly Summary: Submitting a paper with a “hidden" prompt is scientific misconduct if that prompt is intended to obtain a favorable review from an LLM. The inclusion of such a prompt is an attempt to subvert the peer-review process. Although ICML 2025 reviewers are…

  • Wired: Hackers Are Finding New Ways to Hide Malware in DNS Records

    —

    by

    Kurt Seifried
    in

    Source URL: https://arstechnica.com/security/2025/07/hackers-exploit-a-blind-spot-by-hiding-malware-inside-dns-records/ Source: Wired Title: Hackers Are Finding New Ways to Hide Malware in DNS Records Feedly Summary: Newly published research shows that the domain name system—a fundamental part of the web—can be exploited to hide malicious code and prompt injection attacks against chatbots. AI Summary and Description: Yes Summary: The text discusses the…

  • Simon Willison’s Weblog: Voxtral

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/16/voxtral/#atom-everything Source: Simon Willison’s Weblog Title: Voxtral Feedly Summary: Voxtral Mistral released their first audio-input models yesterday: Voxtral Small and Voxtral Mini. These state‑of‑the‑art speech understanding models are available in two sizes—a 24B variant for production-scale applications and a 3B variant for local and edge deployments. Both versions are released under the Apache…

  • CSA: Copilot Studio: AIjacking Leads to Data Exfiltration

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/a-copilot-studio-story-2-when-aijacking-leads-to-full-data-exfiltration Source: CSA Title: Copilot Studio: AIjacking Leads to Data Exfiltration Feedly Summary: AI Summary and Description: Yes Summary: The text discusses significant vulnerabilities in AI agents, particularly focusing on prompt injection attacks that led to unauthorized access and exfiltration of sensitive data. It provides a case study involving a customer service agent…