Tag: Role

  • Simon Willison’s Weblog: Supabase MCP can leak your entire SQL database

    Source URL: https://simonwillison.net/2025/Jul/6/supabase-mcp-lethal-trifecta/#atom-everything Source: Simon Willison’s Weblog Title: Supabase MCP can leak your entire SQL database Feedly Summary: Supabase MCP can leak your entire SQL database Here’s yet another example of a lethal trifecta attack, where an LLM system combines access to private data, exposure to potentially malicious instructions and a mechanism to communicate data…

  • Slashdot: XBOW’s AI-Powered Pentester Grabs Top Rank on HackerOne, Raises $75M to Grow Platform

    Source URL: https://it.slashdot.org/story/25/07/05/1847237/xbows-ai-powered-pentester-grabs-top-rank-on-hackerone-raises-75m-to-grow-platform Source: Slashdot Title: XBOW’s AI-Powered Pentester Grabs Top Rank on HackerOne, Raises $75M to Grow Platform Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the emergence of “Xbow,” an autonomous AI-powered penetration tester that has excelled in finding and reporting vulnerabilities in enterprise software. This innovation highlights the trend…

  • Slashdot: US Plans AI Chip Curbs on Malaysia, Thailand Over China Concerns

    Source URL: https://slashdot.org/story/25/07/04/1644224/us-plans-ai-chip-curbs-on-malaysia-thailand-over-china-concerns?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Plans AI Chip Curbs on Malaysia, Thailand Over China Concerns Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the Trump administration’s plans to restrict shipments of AI chips from companies like Nvidia to Malaysia and Thailand, aiming to prevent semiconductor smuggling into China. This move…

  • Slashdot: UK Minister Tells Turing AI Institute To Focus On Defense

    Source URL: https://tech.slashdot.org/story/25/07/04/2011230/uk-minister-tells-turing-ai-institute-to-focus-on-defense Source: Slashdot Title: UK Minister Tells Turing AI Institute To Focus On Defense Feedly Summary: AI Summary and Description: Yes Summary: UK Science and Technology Secretary Peter Kyle emphasizes the importance of enhancing AI capabilities for national security, urging a shift in focus at the Alan Turing Institute towards defense. This reflects…

  • Simon Willison’s Weblog: Identify, solve, verify

    Source URL: https://simonwillison.net/2025/Jul/4/identify-solve-verify/#atom-everything Source: Simon Willison’s Weblog Title: Identify, solve, verify Feedly Summary: The more time I spend using LLMs for code, the less I worry for my career – even as their coding capabilities continue to improve. Using LLMs as part of my process helps me understand how much of my job isn’t just…

  • Simon Willison’s Weblog: Quoting Adam Gordon Bell

    Source URL: https://simonwillison.net/2025/Jul/3/adam-gordon-bell/#atom-everything Source: Simon Willison’s Weblog Title: Quoting Adam Gordon Bell Feedly Summary: I think that a lot of resistance to AI coding tools comes from the same place: fear of losing something that has defined you for so long. People are reacting against overblown hype, and there is overblown hype. I get that,…

  • Simon Willison’s Weblog: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules

    Source URL: https://simonwillison.net/2025/Jul/3/rate-limiting-by-ip/#atom-everything Source: Simon Willison’s Weblog Title: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules Feedly Summary: TIL: Rate limiting by IP using Cloudflare’s rate limiting rules My blog started timing out on some requests a few days ago, and it turned out there were misbehaving crawlers that were spidering my /search/…

  • Simon Willison’s Weblog: Sandboxed tools in a loop

    Source URL: https://simonwillison.net/2025/Jul/3/sandboxed-tools-in-a-loop/#atom-everything Source: Simon Willison’s Weblog Title: Sandboxed tools in a loop Feedly Summary: Something I’ve realized about LLM tool use is that it means that if you can reduce a problem to something that can be solved by an LLM in a sandbox using tools in a loop, you can brute force that…

  • CSA: What MITRE ATT&CK v17 Means for ESXi Security

    Source URL: https://valicyber.com/resources/mitre-attck-v17-esxi/ Source: CSA Title: What MITRE ATT&CK v17 Means for ESXi Security Feedly Summary: AI Summary and Description: Yes Summary: The article discusses the introduction of the ESXi matrix in MITRE ATT&CK v17, emphasizing its significance for securing hypervisors as critical attack surfaces. It identifies high-risk TTPs (Tactics, Techniques, and Procedures) specific to…