Experimental News Clipping Site

Tag: Lance

  • The Register: Vibe coding tool Cursor’s MCP implementation allows persistent code execution

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/05/mcpoison_bug_abuses_cursor_mcp/ Source: The Register Title: Vibe coding tool Cursor’s MCP implementation allows persistent code execution Feedly Summary: More evidence that AI expands the attack surface Check Point researchers uncovered a remote code execution bug in popular vibe-coding AI tool Cursor that could allow an attacker to poison developer environments by secretly modifying a…

  • Simon Willison’s Weblog: OpenAI’s new open weight (Apache 2) models are really good

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/5/gpt-oss/ Source: Simon Willison’s Weblog Title: OpenAI’s new open weight (Apache 2) models are really good Feedly Summary: The long promised OpenAI open weight models are here, and they are very impressive. They’re available under proper open source licenses – Apache 2.0 – and come in two sizes, 120B and 20B. OpenAI’s own…

  • The Register: Perplexity vexed by Cloudflare’s claims its bots are bad

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/05/perplexity_vexed_by_cloudflares_claims/ Source: The Register Title: Perplexity vexed by Cloudflare’s claims its bots are bad Feedly Summary: AI search biz insists its content capture and summarization is okay because someone asked for it AI search biz Perplexity claims that Cloudflare has mischaracterized its site crawlers as malicious bots and that the content delivery network…

  • Docker: Everyone’s a Snowflake: Designing Hardened Image Processes for the Real World

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/hardened-image-best-practices/ Source: Docker Title: Everyone’s a Snowflake: Designing Hardened Image Processes for the Real World Feedly Summary: Hardened container images and distroless software are the new hotness as startups and incumbents alike pile into the fast-growing market. In theory, hardened images provide not only a smaller attack surface but operational simplicity. In practice,…

  • The Register: Patch now: Millions of Dell PCs with Broadcom chips vulnerable to attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/05/millions_of_dell_pc_with/ Source: The Register Title: Patch now: Millions of Dell PCs with Broadcom chips vulnerable to attack Feedly Summary: Psst, wanna steal someone’s biometrics? black hat Critical security flaws in Broadcom chips used in more than 100 models of Dell computers could allow attackers to take over tens of millions of users’ devices,…

  • OpenAI : Estimating worst case frontier risks of open weight LLMs

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/estimating-worst-case-frontier-risks-of-open-weight-llms Source: OpenAI Title: Estimating worst case frontier risks of open weight LLMs Feedly Summary: In this paper, we study the worst-case frontier risks of releasing gpt-oss. We introduce malicious fine-tuning (MFT), where we attempt to elicit maximum capabilities by fine-tuning gpt-oss to be as capable as possible in two domains: biology and…

  • OpenAI : gpt-oss-120b & gpt-oss-20b Model Card

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/gpt-oss-model-card Source: OpenAI Title: gpt-oss-120b & gpt-oss-20b Model Card Feedly Summary: We introduce gpt-oss-120b and gpt-oss-20b, two open-weight reasoning models available under the Apache 2.0 license and our gpt-oss usage policy. AI Summary and Description: Yes Summary: The introduction of gpt-oss-120b and gpt-oss-20b highlights the development of open-weight reasoning models, which reflects significant…

  • Cisco Talos Blog: ReVault! When your SoC turns against you…

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/revault-when-your-soc-turns-against-you/ Source: Cisco Talos Blog Title: ReVault! When your SoC turns against you… Feedly Summary: Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”.  AI Summary and Description: Yes **Summary:** The report details significant vulnerabilities discovered in Dell’s ControlVault3…

  • Simon Willison’s Weblog: ChatGPT agent’s user-agent

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/4/chatgpt-agents-user-agent/#atom-everything Source: Simon Willison’s Weblog Title: ChatGPT agent’s user-agent Feedly Summary: I was exploring how ChatGPT agent works today. I learned some interesting things about how it exposes its identity through HTTP headers, then made a huge blunder in thinking it was leaking its URLs to Bingbot and Yandex… but it turned out…