Tag: vulnerability

Source URL: https://www.theregister.com/2025/08/20/gpt4o_pod_bay_door/ Source: The Register Title: Open the pod bay door, GPT-4o Feedly Summary: Researchers use LLM in ‘AI Space Cortex’ to automate robotic extraterrestrial exploration Businesses may be struggling to find meaningful ways to use artificial intelligence software, but space scientists at least have a few ideas about how to deploy AI models.……

Embrace The Red: Amazon Q Developer: Remote Code Execution with Prompt Injection

—

by

Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-remote-code-execution/ Source: Embrace The Red Title: Amazon Q Developer: Remote Code Execution with Prompt Injection Feedly Summary: The Amazon Q Developer VS Code Extension (Amazon Q) is a popular coding agent, with over 1 million downloads. The extension is vulnerable to indirect prompt injection, and in this post we discuss a vulnerability that…

The Register: Don’t want drive-by Ollama attackers snooping on your local chats? Patch now

—

by

Source URL: https://www.theregister.com/2025/08/19/ollama_driveby_attack/ Source: The Register Title: Don’t want drive-by Ollama attackers snooping on your local chats? Patch now Feedly Summary: Reconfigure local app settings via a ‘simple’ POST request A now-patched flaw in popular AI model runner Ollama allows drive-by attacks in which a miscreant uses a malicious website to remotely target people’s personal…

The Register: Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in

—

by

Source URL: https://www.theregister.com/2025/08/19/apache_activemq_patch_malware/ Source: The Register Title: Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in Feedly Summary: Intruders hoped no one would notice their presence Criminals exploiting a critical vulnerability in open source Apache ActiveMQ middleware are fixing the flaw that allowed them access, after establishing persistence on Linux…

Wired: The AI-Powered PDF Marks the End of an Era

—

by

Source URL: https://www.wired.com/story/adobe-ai-powered-pdf-end-of-an-era/ Source: Wired Title: The AI-Powered PDF Marks the End of an Era Feedly Summary: As Adobe rolls out more generative AI features for the PDF, the era of chatbot-less software is firmly a thing of the past. AI Summary and Description: Yes Summary: Adobe’s introduction of generative AI features for PDF editing…

Embrace The Red: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection

—

by

Source URL: https://embracethered.com/blog/posts/2025/amazon-q-developer-data-exfil-via-dns/ Source: Embrace The Red Title: Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection Feedly Summary: The next three posts will cover high severity vulnerabilities in the Amazon Q Developer VS Code Extension (Amazon Q), which is a very popular coding agent, with over 1 million downloads. It is vulnerable to…

The Cloudflare Blog: Announcing the Cloudflare Browser Developer Program

Aug 18, 2025

—

by

Source URL: https://blog.cloudflare.com/announcing-the-cloudflare-browser-developer-program/ Source: The Cloudflare Blog Title: Announcing the Cloudflare Browser Developer Program Feedly Summary: Announcing the Browser Developer Program: Cloudflare’s new collaborative program to help shape Cloudflare challenges that work seamlessly with your browser. Join us today! AI Summary and Description: Yes Summary: Cloudflare has launched its Browser Developer Program to foster collaboration…

The Register: Boffins say tool can sniff 5G traffic, launch ‘attacks’ without using rogue base stations

Aug 18, 2025

—

by

Source URL: https://www.theregister.com/2025/08/18/sni5gect/ Source: The Register Title: Boffins say tool can sniff 5G traffic, launch ‘attacks’ without using rogue base stations Feedly Summary: Sni5Gect research crew targets sweet spot during device / network handshake pause Security boffins have released an open source tool for poking holes in 5G mobile networks, claiming it can do up-…

Slashdot: Android’s pKVM Becomes First Globally Certified Software to Achieve SESIP Level 5 Security Certification

Aug 17, 2025

—

by