Experimental News Clipping Site

Tag: security implications

  • Embrace The Red: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-data-exfil-via-dns/ Source: Embrace The Red Title: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection Feedly Summary: The next three posts will cover high severity vulnerabilities in the Amazon Q Developer VS Code Extension (Amazon Q), which is a very popular coding agent, with over 1 million downloads. It is vulnerable to…

  • Embrace The Red: Google Jules is Vulnerable To Invisible Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/google-jules-invisible-prompt-injection/ Source: Embrace The Red Title: Google Jules is Vulnerable To Invisible Prompt Injection Feedly Summary: The latest Gemini models quite reliably interpret hidden Unicode Tag characters as instructions. This vulnerability, first reported to Google over a year ago, has not been mitigated at the model or API level, hence now affects all…

  • Google Online Security Blog: Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification

    —

    by

    Kurt Seifried
    in

    Source URL: http://security.googleblog.com/2025/08/Android-pKVM-Certified-SESIP-Level-5.html Source: Google Online Security Blog Title: Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification Feedly Summary: AI Summary and Description: Yes Summary: The announcement about the pKVM achieving SESIP Level 5 certification marks a significant advancement in open-source security for consumer electronics, particularly in supporting…

  • Simon Willison’s Weblog: LLM 0.27, the annotated release notes: GPT-5 and improved tool calling

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/11/llm-027/ Source: Simon Willison’s Weblog Title: LLM 0.27, the annotated release notes: GPT-5 and improved tool calling Feedly Summary: I shipped LLM 0.27 today, adding support for the new GPT-5 family of models from OpenAI plus a flurry of improvements to the tool calling features introduced in LLM 0.26. Here are the annotated…

  • Simon Willison’s Weblog: Chromium Docs: The Rule Of 2

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/11/the-rule-of-2/ Source: Simon Willison’s Weblog Title: Chromium Docs: The Rule Of 2 Feedly Summary: Chromium Docs: The Rule Of 2 Alex Russell pointed me to this principle in the Chromium security documentation as similar to my description of the lethal trifecta. First added in 2019, the Chromium guideline states: When you write code…

  • Cisco Talos Blog: ReVault! When your SoC turns against you… deep dive edition

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/revault-when-your-soc-turns-against-you-2/ Source: Cisco Talos Blog Title: ReVault! When your SoC turns against you… deep dive edition Feedly Summary: Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”.  AI Summary and Description: Yes **Summary:** The text conducts an in-depth analysis…

  • OpenAI : GPT-5 System Card

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/gpt-5-system-card Source: OpenAI Title: GPT-5 System Card Feedly Summary: GPT-5 offers high reasoning performance, new controls for devs, and best-in-class results on real coding tasks. AI Summary and Description: Yes Summary: The text highlights advancements in GPT-5, particularly its enhanced reasoning abilities and features that cater to developers. This is relevant for professionals…

  • OpenAI : From hard refusals to safe-completions: toward output-centric safety training

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/gpt-5-safe-completions Source: OpenAI Title: From hard refusals to safe-completions: toward output-centric safety training Feedly Summary: Discover how OpenAI’s new safe-completions approach in GPT-5 improves both safety and helpfulness in AI responses—moving beyond hard refusals to nuanced, output-centric safety training for handling dual-use prompts. AI Summary and Description: Yes Summary: The text discusses OpenAI’s…

  • Slashdot: Lyft Will Use Chinese Driverless Cars In Britain and Germany

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/08/06/0155257/lyft-will-use-chinese-driverless-cars-in-britain-and-germany?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Lyft Will Use Chinese Driverless Cars In Britain and Germany Feedly Summary: AI Summary and Description: Yes Summary: The text discusses China’s advancements in driverless car technology through collaborations between automakers and software companies, particularly focusing on Baidu’s partnership with Lyft. This development brings to light not only the…