Experimental News Clipping Site

Tag: Users

  • Embrace The Red: Amazon Q Developer: Remote Code Execution with Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-remote-code-execution/ Source: Embrace The Red Title: Amazon Q Developer: Remote Code Execution with Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a popular coding agent, with over 1 million downloads. The extension is vulnerable to indirect prompt injection, and in this post we discuss a vulnerability that…

  • The Register: Don’t want drive-by Ollama attackers snooping on your local chats? Patch now

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/19/ollama_driveby_attack/ Source: The Register Title: Don’t want drive-by Ollama attackers snooping on your local chats? Patch now Feedly Summary: Reconfigure local app settings via a ‘simple’ POST request A now-patched flaw in popular AI model runner Ollama allows drive-by attacks in which a miscreant uses a malicious website to remotely target people’s personal…

  • Simon Willison’s Weblog: llama.cpp guide: running gpt-oss with llama.cpp

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/19/gpt-oss-with-llama-cpp/ Source: Simon Willison’s Weblog Title: llama.cpp guide: running gpt-oss with llama.cpp Feedly Summary: llama.cpp guide: running gpt-oss with llama.cpp Really useful official guide to running the OpenAI gpt-oss models using llama-server from llama.cpp – which provides an OpenAI-compatible localhost API and a neat web interface for interacting with the models. TLDR version…

  • Wired: The AI-Powered PDF Marks the End of an Era

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.wired.com/story/adobe-ai-powered-pdf-end-of-an-era/ Source: Wired Title: The AI-Powered PDF Marks the End of an Era Feedly Summary: As Adobe rolls out more generative AI features for the PDF, the era of chatbot-less software is firmly a thing of the past. AI Summary and Description: Yes Summary: Adobe’s introduction of generative AI features for PDF editing…

  • Slashdot: US Spy Chief Gabbard Says UK Agreed To Drop ‘Backdoor’ Mandate for Apple

    —

    by

    Kurt Seifried
    in

    Source URL: https://apple.slashdot.org/story/25/08/19/0345252/us-spy-chief-gabbard-says-uk-agreed-to-drop-backdoor-mandate-for-apple?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Spy Chief Gabbard Says UK Agreed To Drop ‘Backdoor’ Mandate for Apple Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a recent development in the UK’s approach to encryption and security, specifically regarding Apple and its iCloud data. The intervention by the Trump administration highlights…

  • Embrace The Red: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-data-exfil-via-dns/ Source: Embrace The Red Title: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection Feedly Summary: The next three posts will cover high severity vulnerabilities in the Amazon Q Developer VS Code Extension (Amazon Q), which is a very popular coding agent, with over 1 million downloads. It is vulnerable to…

  • The Register: Microsoft crams Copilot AI directly into Excel cells

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/18/microsoft_adds_copilot_ai_formulas/ Source: The Register Title: Microsoft crams Copilot AI directly into Excel cells Feedly Summary: Meet the new COPILOT function Microsoft, in its ongoing effort to AI-ify every product it has, is now adding it right into the cells of Excel.  Available on Monday to beta users of Microsoft 365 Copilot, a new…