Tag: Micro

  • Embrace The Red: Amazon Q Developer: Remote Code Execution with Prompt Injection

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-remote-code-execution/ Source: Embrace The Red Title: Amazon Q Developer: Remote Code Execution with Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a popular coding agent, with over 1 million downloads. The extension is vulnerable to indirect prompt injection, and in this post we discuss a vulnerability that…

  • The Register: Microsoft crams Copilot AI directly into Excel cells

    Source URL: https://www.theregister.com/2025/08/18/microsoft_adds_copilot_ai_formulas/ Source: The Register Title: Microsoft crams Copilot AI directly into Excel cells Feedly Summary: Meet the new COPILOT function Microsoft, in its ongoing effort to AI-ify every product it has, is now adding it right into the cells of Excel.  Available on Monday to beta users of Microsoft 365 Copilot, a new…

  • Embrace The Red: Data Exfiltration via Image Rendering Fixed in Amp Code

    Source URL: https://embracethered.com/blog/posts/2025/amp-code-fixed-data-exfiltration-via-images/ Source: Embrace The Red Title: Data Exfiltration via Image Rendering Fixed in Amp Code Feedly Summary: In this post we discuss a vulnerability that was present in Amp Code from Sourcegraph by which an attacker could exploit markdown driven image rendering to exfiltrate sensitive information. This vulnerability is common in AI applications…

  • Slashdot: AI Is Reshaping Hacking. No One Agrees How Fast

    Source URL: https://it.slashdot.org/story/25/08/16/1936221/ai-is-reshaping-hacking-no-one-agrees-how-fast Source: Slashdot Title: AI Is Reshaping Hacking. No One Agrees How Fast Feedly Summary: AI Summary and Description: Yes Summary: The text discusses advancements in AI agents presented at the Black Hat conference, highlighting how these innovations could potentially enhance the capabilities of cybersecurity defenders. However, it also underscores the duality of…

  • Slashdot: Remember the Companies Making Vital Open Source Contributions

    Source URL: https://news.slashdot.org/story/25/08/16/1749228/remember-the-companies-making-vital-open-source-contributions?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Remember the Companies Making Vital Open Source Contributions Feedly Summary: AI Summary and Description: Yes Summary: The text highlights the critical role of large tech companies in contributing to open-source projects, emphasizing that their involvement often stems from self-interest rather than altruism. It underscores how significant contributions from companies…

  • Simon Willison’s Weblog: Open weight LLMs exhibit inconsistent performance across providers

    Source URL: https://simonwillison.net/2025/Aug/15/inconsistent-performance/ Source: Simon Willison’s Weblog Title: Open weight LLMs exhibit inconsistent performance across providers Feedly Summary: Artificial Analysis published a new benchmark the other day, this time focusing on how an individual model – OpenAI’s gpt-oss-120b – performs across different hosted providers. The results showed some surprising differences. Here’s the one with the…

  • Slashdot: Microsoft Says Voice Will Emerge as Primary Input for Next Windows

    Source URL: https://tech.slashdot.org/story/25/08/14/1441240/microsoft-says-voice-will-emerge-as-primary-input-for-next-windows?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Says Voice Will Emerge as Primary Input for Next Windows Feedly Summary: AI Summary and Description: Yes Summary: The upcoming version of Windows will significantly evolve through the integration of AI technologies, specifically enhancing user interaction by making voice a primary input method. This transformation will leverage both…