Experimental News Clipping Site

Tag: injections

  • CSA: Copilot Studio: AIjacking Leads to Data Exfiltration

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/a-copilot-studio-story-2-when-aijacking-leads-to-full-data-exfiltration Source: CSA Title: Copilot Studio: AIjacking Leads to Data Exfiltration Feedly Summary: AI Summary and Description: Yes Summary: The text discusses significant vulnerabilities in AI agents, particularly focusing on prompt injection attacks that led to unauthorized access and exfiltration of sensitive data. It provides a case study involving a customer service agent…

  • The Register: Scholars sneaking phrases into papers to fool AI reviewers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/07/scholars_try_to_fool_llm_reviewers/ Source: The Register Title: Scholars sneaking phrases into papers to fool AI reviewers Feedly Summary: Using prompt injections to play a Jedi mind trick on LLMs A handful of international computer science researchers appear to be trying to influence AI reviews with a new class of prompt injection attack.… AI Summary and…

  • CSA: Primer on Model Context Protocol (MCP) Implementation

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/articles/a-primer-on-model-context-protocol-mcp-secure-implementation Source: CSA Title: Primer on Model Context Protocol (MCP) Implementation Feedly Summary: AI Summary and Description: Yes **Summary:** The text serves as a comprehensive implementation guide for deploying the Model Context Protocol (MCP) with a security-focused lens, emphasizing threat modeling using the MAESTRO framework. It offers practical insights into building secure Large…

  • Simon Willison’s Weblog: The lethal trifecta for AI agents: private data, untrusted content, and external communication

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: The lethal trifecta for AI agents: private data, untrusted content, and external communication Feedly Summary: If you are a user of LLM systems that use tools (you can call them “AI agents" if you like) it is critically important that you understand the risk of combining tools…

  • Google Online Security Blog: Mitigating prompt injection attacks with a layered defense strategy

    —

    by

    Kurt Seifried
    in

    Source URL: http://security.googleblog.com/2025/06/mitigating-prompt-injection-attacks.html Source: Google Online Security Blog Title: Mitigating prompt injection attacks with a layered defense strategy Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses emerging security threats associated with generative AI, particularly focusing on indirect prompt injections that manipulate AI systems through hidden malicious instructions. Google outlines its layered security…