Experimental News Clipping Site

Tag: OPM

  • The Register: Perplexity’s Comet browser naively processed pages with evil instructions

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/20/perplexity_comet_browser_prompt_injection/ Source: The Register Title: Perplexity’s Comet browser naively processed pages with evil instructions Feedly Summary: Rival Brave flags prompt injection vulnerability, now patched To the surprise of no one in the security industry, processing untrusted, unvalidated input is a bad idea.… AI Summary and Description: Yes Summary: The text discusses a recently…

  • Wired: Do Large Language Models Dream of AI Agents?

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/sleeptime-compute-chatbots-memory/ Source: Wired Title: Do Large Language Models Dream of AI Agents? Feedly Summary: For AI models, knowing what to remember might be as important as knowing what to forget. Welcome to the era of “sleeptime compute.” AI Summary and Description: Yes Summary: The text introduces the concept of “sleeptime compute,” which emphasizes…

  • Docker: The Supply Chain Paradox: When “Hardened” Images Become a Vendor Lock-in Trap

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.docker.com/blog/hardened-container-images-security-vendor-lock-in/ Source: Docker Title: The Supply Chain Paradox: When “Hardened” Images Become a Vendor Lock-in Trap Feedly Summary: The market for pre-hardened container images is experiencing explosive growth as security-conscious organizations pursue the ultimate efficiency: instant security with minimal operational overhead. The value proposition is undeniably compelling—hardened images with minimal dependencies promise security…

  • Embrace The Red: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-interprets-hidden-instructions/ Source: Embrace The Red Title: Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a very popular coding agent, with over 1 million downloads. In previous posts we showed how prompt injection vulnerabilities in Amazon Q could lead…

  • Schneier on Security: Subverting AIOps Systems Through Poisoned Input Data

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/08/subverting-aiops-systems-through-poisoned-input-data.html Source: Schneier on Security Title: Subverting AIOps Systems Through Poisoned Input Data Feedly Summary: In this input integrity attack against an AI system, researchers were able to fool AIOps tools: AIOps refers to the use of LLM-based agents to gather and analyze application telemetry, including system logs, performance metrics, traces, and alerts,…

  • Wired: AI Isn’t Coming for Hollywood. It Has Already Arrived

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/artificial-intelligence-hollywood-stability/ Source: Wired Title: AI Isn’t Coming for Hollywood. It Has Already Arrived Feedly Summary: An early winner in the generative AI wars was near collapse—then bet everything on a star-studded comeback. Can Stability AI beat the competition? AI Summary and Description: Yes Summary: The text discusses Stability AI’s significant challenges and recovery…

  • The Register: KPMG wrote 100-page prompt to build agentic TaxBot

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/20/kpmg_giant_prompt_tax_agent/ Source: The Register Title: KPMG wrote 100-page prompt to build agentic TaxBot Feedly Summary: Produces advice in a single day instead of two weeks – without job losses The Australian arm of consultancy firm KPMG wrote a 100-page prompt to create an agentic system that prepares tax advice far faster than humans.……

  • Embrace The Red: Amazon Q Developer: Remote Code Execution with Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-remote-code-execution/ Source: Embrace The Red Title: Amazon Q Developer: Remote Code Execution with Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a popular coding agent, with over 1 million downloads. The extension is vulnerable to indirect prompt injection, and in this post we discuss a vulnerability that…

  • Tomasz Tunguz: When One AI Grades Another’s Work

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.tomtunguz.com/evolution-of-ai-judges-improving-evoblog/ Source: Tomasz Tunguz Title: When One AI Grades Another’s Work Feedly Summary: Since launching EvoBlog internally, I’ve wanted to improve it. One way of doing this is having an LLM judge the best posts rather than a static scoring system. I appointed Gemini 2.5 to be that judge. This post is a…