Tag: Lance

  • Embrace The Red: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-interprets-hidden-instructions/ Source: Embrace The Red Title: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a very popular coding agent, with over 1 million downloads. In previous posts we showed how prompt injection vulnerabilities in Amazon Q could lead…

  • The Register: KPMG wrote 100-page prompt to build agentic TaxBot

    Source URL: https://www.theregister.com/2025/08/20/kpmg_giant_prompt_tax_agent/ Source: The Register Title: KPMG wrote 100-page prompt to build agentic TaxBot Feedly Summary: Produces advice in a single day instead of two weeks – without job losses The Australian arm of consultancy firm KPMG wrote a 100-page prompt to create an agentic system that prepares tax advice far faster than humans.……

  • The Register: Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in

    Source URL: https://www.theregister.com/2025/08/19/apache_activemq_patch_malware/ Source: The Register Title: Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in Feedly Summary: Intruders hoped no one would notice their presence Criminals exploiting a critical vulnerability in open source Apache ActiveMQ middleware are fixing the flaw that allowed them access, after establishing persistence on Linux…

  • Slashdot: US Spy Chief Gabbard Says UK Agreed To Drop ‘Backdoor’ Mandate for Apple

    Source URL: https://apple.slashdot.org/story/25/08/19/0345252/us-spy-chief-gabbard-says-uk-agreed-to-drop-backdoor-mandate-for-apple?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Spy Chief Gabbard Says UK Agreed To Drop ‘Backdoor’ Mandate for Apple Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a recent development in the UK’s approach to encryption and security, specifically regarding Apple and its iCloud data. The intervention by the Trump administration highlights…

  • Shabie’s blog: Agents are search over action space

    Source URL: https://shabie.github.io/2025/08/18/agents-are-search-over-action-space.html Source: Shabie’s blog Title: Agents are search over action space Feedly Summary: It’s no secret that today’s LLM-based agents are unreliable. This makes them a gamble for most critical tasks, so where can they be safely applied? The answer lies in finding asymmetry: we should use them in domains where the downside…

  • The Register: Boffins say tool can sniff 5G traffic, launch ‘attacks’ without using rogue base stations

    Source URL: https://www.theregister.com/2025/08/18/sni5gect/ Source: The Register Title: Boffins say tool can sniff 5G traffic, launch ‘attacks’ without using rogue base stations Feedly Summary: Sni5Gect research crew targets sweet spot during device / network handshake pause Security boffins have released an open source tool for poking holes in 5G mobile networks, claiming it can do up-…

  • Slashdot: Google’s ‘AI Overview’ Pointed Him to a Customer Service Number. It Was a Scam

    Source URL: https://yro.slashdot.org/story/25/08/18/0223228/googles-ai-overview-pointed-him-to-a-customer-service-number-it-was-a-scam?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google’s ‘AI Overview’ Pointed Him to a Customer Service Number. It Was a Scam Feedly Summary: AI Summary and Description: Yes Summary: The text highlights a fraudulent scheme involving AI-generated chatbots and search engine results that led a real estate developer to fall victim to a scam when searching…