Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)embracethered.com 2kerng4modiscuss
The AI-Assisted Breach of Mexico's Government Infrastructure [pdf]cdn.prod.website-files.com 6kerng5modiscuss
GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)embracethered.com 128kerng11mo18 comments
Amazon Q Developer for VS Code: Remote Code Execution with Prompt Injectionembracethered.com 5kerng1y1 comment
GitHub Copilot: Remote code execution via prompt injection (CVE-2025-53773)embracethered.com 15kerng1y2 comments
I Spent $500 to Test Devin for Prompt Injection So That You Don't Have Toembracethered.com 4kerng1ydiscuss
Cursor IDE: Arbitrary Data Exfiltration via Mermaid (CVE-2025-54132)embracethered.com 4kerng1ydiscuss
Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltrationembracethered.com 5kerng1ydiscuss
Hosting COM Servers with an MCP Server (AI-Powered Office Automation)embracethered.com 3kerng1ydiscuss
Sneaky Bits: Advanced Data Smuggling using just two invisible Unicode charactersembracethered.com 2kerng1ydiscuss
Microsoft Copilot: Prompt Injection, ASCII Smuggling and Exfiltration of Emailsembracethered.com 3kerng2ydiscuss
Prompt Injections in the Wild – Exploiting LLM Agents – Hitcon 2023 [video]youtube.com 3kerng2ydiscuss
Automatic Tool Invocation When Browsing with ChatGPT – Threats and Mitigationsembracethered.com 4kerng2ydiscuss