Tag: security vulnerability
-
Embrace The Red: Data Exfiltration via Image Rendering Fixed in Amp Code
Source URL: https://embracethered.com/blog/posts/2025/amp-code-fixed-data-exfiltration-via-images/ Source: Embrace The Red Title: Data Exfiltration via Image Rendering Fixed in Amp Code Feedly Summary: In this post we discuss a vulnerability that was present in Amp Code from Sourcegraph by which an attacker could exploit markdown driven image rendering to exfiltrate sensitive information. This vulnerability is common in AI applications…
-
The Register: ‘MadeYouReset’ HTTP/2 flaw lets attackers DoS servers
Source URL: https://www.theregister.com/2025/08/14/madeyoureset_http2_flaw_lets_attackers/ Source: The Register Title: ‘MadeYouReset’ HTTP/2 flaw lets attackers DoS servers Feedly Summary: Researchers had to notify over 100 vendors of flaw that builds on 2023’s Rapid Reset with neat twist past usual mitigations Security researchers Gal Bar Nahum, Anat Bremler-Barr, and Yaniv Harel have published details of a “common design flaw"…
-
Embrace The Red: GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)
Source URL: https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/ Source: Embrace The Red Title: GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773) Feedly Summary: This post is about an important, but also scary, prompt injection discovery that leads to full system compromise of the developer’s machine in GitHub Copilot and VS Code. It is achieved by placing Copilot into YOLO…