Experimental News Clipping Site

Tag: vulnerabilities

  • Slashdot: Microsoft Used China-Based Engineers to Support Product Recently Hacked by China

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/08/04/1429251/microsoft-used-china-based-engineers-to-support-product-recently-hacked-by-china?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Used China-Based Engineers to Support Product Recently Hacked by China Feedly Summary: AI Summary and Description: Yes Summary: The text reports on a security breach involving Chinese state-sponsored hackers exploiting SharePoint vulnerabilities, impacting numerous organizations, including U.S. government agencies. Notably, it mentions that this software, maintained by China-based…

  • Simon Willison’s Weblog: Quoting Nick Turley

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/4/nick-turley/ Source: Simon Willison’s Weblog Title: Quoting Nick Turley Feedly Summary: This week, ChatGPT is on track to reach 700M weekly active users — up from 500M at the end of March and 4× since last year. — Nick Turley, Head of ChatGPT, OpenAI Tags: openai, chatgpt, ai AI Summary and Description: Yes…

  • Embrace The Red: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132)

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/cursor-data-exfiltration-with-mermaid/ Source: Embrace The Red Title: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132) Feedly Summary: Cursor is a popular AI code editor. In this post I want to share how I found an interesting data exfiltration issue, the demo exploits built and how it got fixed. When using Cursor I noticed that…

  • The Register: Microsoft briefly turned off Indian company’s cloud due to EU sanctions on Russia

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/08/04/nayara_energy_microsoft_india/ Source: The Register Title: Microsoft briefly turned off Indian company’s cloud due to EU sanctions on Russia Feedly Summary: Oh, the irony of Europe demonstrating the importance of the sovereign cloud it craves Microsoft disconnected Indian company Nayara Energy from its cloudy resources last week, before restoring access ahead of a court…

  • Slashdot: 5 Million People Tried Microsoft’s AI Coding Tool ‘GitHub Copilot’ in the Last 3 Months

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/08/03/037202/5-million-people-tried-microsofts-ai-coding-tool-github-copilot-in-the-last-3-months?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: 5 Million People Tried Microsoft’s AI Coding Tool ‘GitHub Copilot’ in the Last 3 Months Feedly Summary: AI Summary and Description: Yes Summary: Microsoft’s AI coding assistant, GitHub Copilot, has now reached 20 million users, showcasing significant growth in adoption, particularly among enterprise clients. The increase in users indicates…

  • Embrace The Red: Turning ChatGPT Codex Into A ZombAI Agent

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/chatgpt-codex-remote-control-zombai/ Source: Embrace The Red Title: Turning ChatGPT Codex Into A ZombAI Agent Feedly Summary: Today we cover ChatGPT Codex as part of the Month of AI Bugs series. ChatGPT Codex is a cloud-based software engineering agent that answers codebase questions, executes code, and drafts pull requests. In particular, this post will demonstrate…