Experimental News Clipping Site

Tag: on

  • Simon Willison’s Weblog: Supabase MCP can leak your entire SQL database

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: Supabase MCP can leak your entire SQL database Feedly Summary: Supabase MCP can leak your entire SQL database Here’s yet another example of a lethal trifecta attack, where an LLM system combines access to private data, exposure to potentially malicious instructions and a mechanism to communicate data…

  • Slashdot: Microsoft Open Sources Copilot Chat for VS Code on GitHub

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/07/05/1935203/microsoft-open-sources-copilot-chat-for-vs-code-on-github Source: Slashdot Title: Microsoft Open Sources Copilot Chat for VS Code on GitHub Feedly Summary: AI Summary and Description: Yes Summary: Microsoft has open-sourced the GitHub Copilot Chat extension for VS Code, allowing developers to access its internal workings, including data handling and telemetry. This transparency is significant for security, as it…

  • Slashdot: XBOW’s AI-Powered Pentester Grabs Top Rank on HackerOne, Raises $75M to Grow Platform

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/07/05/1847237/xbows-ai-powered-pentester-grabs-top-rank-on-hackerone-raises-75m-to-grow-platform Source: Slashdot Title: XBOW’s AI-Powered Pentester Grabs Top Rank on HackerOne, Raises $75M to Grow Platform Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the emergence of “Xbow,” an autonomous AI-powered penetration tester that has excelled in finding and reporting vulnerabilities in enterprise software. This innovation highlights the trend…

  • Slashdot: Two Sudo Vulnerabilities Discovered and Patched

    —

    by

    Kurt Seifried
    in

    Source URL: https://linux.slashdot.org/story/25/07/05/0323220/two-sudo-vulnerabilities-discovered-and-patched?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Two Sudo Vulnerabilities Discovered and Patched Feedly Summary: AI Summary and Description: Yes Summary: The text discusses recently disclosed security vulnerabilities in Sudo that allow local attackers to escalate their privileges. Researchers have identified two critical flaws, CVE-2025-32462 and CVE-2025-32463, which could potentially expose systems to security risks and…

  • Slashdot: AI Coding Agents Are Already Commoditized

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/07/04/191224/ai-coding-agents-are-already-commoditized?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: AI Coding Agents Are Already Commoditized Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the commoditization of AI coding agents, arguing that recent advancements in AI models have leveled the playing field, making powerful coding agents accessible without unique technical advantages. Sean Goedecke emphasizes that the…

  • Slashdot: EU Sticks With Timeline For AI Rules

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/07/04/198257/eu-sticks-with-timeline-for-ai-rules?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: EU Sticks With Timeline For AI Rules Feedly Summary: AI Summary and Description: Yes Summary: The European Union is moving forward with its AI regulations despite calls from major tech companies for a delay. This situation has raised concerns among industry leaders about the impact of overlapping regulations on…

  • Slashdot: US Plans AI Chip Curbs on Malaysia, Thailand Over China Concerns

    —

    by

    Kurt Seifried
    in

    Source URL: https://slashdot.org/story/25/07/04/1644224/us-plans-ai-chip-curbs-on-malaysia-thailand-over-china-concerns?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Plans AI Chip Curbs on Malaysia, Thailand Over China Concerns Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the Trump administration’s plans to restrict shipments of AI chips from companies like Nvidia to Malaysia and Thailand, aiming to prevent semiconductor smuggling into China. This move…

  • Slashdot: UK Minister Tells Turing AI Institute To Focus On Defense

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/07/04/2011230/uk-minister-tells-turing-ai-institute-to-focus-on-defense Source: Slashdot Title: UK Minister Tells Turing AI Institute To Focus On Defense Feedly Summary: AI Summary and Description: Yes Summary: UK Science and Technology Secretary Peter Kyle emphasizes the importance of enhancing AI capabilities for national security, urging a shift in focus at the Alan Turing Institute towards defense. This reflects…

  • Simon Willison’s Weblog: Identify, solve, verify

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jul/4/identify-solve-verify/#atom-everything Source: Simon Willison’s Weblog Title: Identify, solve, verify Feedly Summary: The more time I spend using LLMs for code, the less I worry for my career – even as their coding capabilities continue to improve. Using LLMs as part of my process helps me understand how much of my job isn’t just…

  • Slashdot: Simple Text Additions Can Fool Advanced AI Reasoning Models, Researchers Find

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/07/04/1521245/simple-text-additions-can-fool-advanced-ai-reasoning-models-researchers-find Source: Slashdot Title: Simple Text Additions Can Fool Advanced AI Reasoning Models, Researchers Find Feedly Summary: AI Summary and Description: Yes Summary: The research highlights a significant vulnerability in state-of-the-art reasoning AI models through the “CatAttack” technique, which attaches irrelevant phrases to math problems, leading to higher error rates and inefficient responses.…