HNHacker News
TopNewBestAskShowJobs

kerng

6,204 karma · joined February 22, 2018

submissionscomments

From Select to Sysadmin: Hijacking Microsoft SQL Copilot (CVE-2026-65669)

embracethered.com·2 pts·kerng·
0

Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)

embracethered.com·2 pts·kerng·
0

The AI-Assisted Breach of Mexico's Government Infrastructure [pdf]

cdn.prod.website-files.com·6 pts·kerng·
0

GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)

embracethered.com·128 pts·kerng·
18

Machine Learning Attack Series: Image Scaling Attacks (2020)

embracethered.com·3 pts·kerng·
0

Month of AI Bugs (August 2025)

monthofaibugs.com·3 pts·kerng·
0

Cross-Agent Privilege Escalation: When Agents Free Each Other

embracethered.com·3 pts·kerng·
0

AgentHopper: An AI Virus

embracethered.com·6 pts·kerng·
0

Amazon Q Developer: Remote Code Execution with Prompt Injection

embracethered.com·2 pts·kerng·
0

AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection

embracethered.com·5 pts·kerng·
0

Amazon Q Developer for VS Code: Remote Code Execution with Prompt Injection

embracethered.com·5 pts·kerng·
1

GitHub Copilot: Remote code execution via prompt injection (CVE-2025-53773)

embracethered.com·15 pts·kerng·
2

I Spent $500 to Test Devin for Prompt Injection So That You Don't Have To

embracethered.com·4 pts·kerng·
0

Cursor IDE: Arbitrary Data Exfiltration via Mermaid (CVE-2025-54132)

embracethered.com·4 pts·kerng·
0

Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltration

embracethered.com·5 pts·kerng·
0

Hosting COM Servers with an MCP Server (AI-Powered Office Automation)

embracethered.com·3 pts·kerng·
0

AI ClickFix: Hijacking Computer-Use Agents

embracethered.com·4 pts·kerng·
0

ChatGPT: Dump all your memories and chat history for inspection

twitter.com·3 pts·kerng·
0

Latest Gemini models now follow invisible Unicode Tag instructions

twitter.com·5 pts·kerng·
0

Sneaky Bits: Advanced Data Smuggling using just two invisible Unicode characters

embracethered.com·2 pts·kerng·
0

ChatGPT Operator: Prompt Injection Exploits and Defenses

embracethered.com·5 pts·kerng·
0

Security ProbLLMs in XAI's Grok: A Deep Dive

embracethered.com·1 pts·kerng·
0

How to Find XSS in 2024

twitter.com·3 pts·kerng·
0

Spyware Injection into ChatGPT's Long-Term Memory (SpAIware)

embracethered.com·5 pts·kerng·
0

Microsoft Copilot: Prompt Injection, ASCII Smuggling and Exfiltration of Emails

embracethered.com·3 pts·kerng·
0

Google Colab AI: Data Leakage Fixed. Some Risks Remain

embracethered.com·5 pts·kerng·
0

Breaking Instruction Hierarchy in OpenAI's GPT-4o-mini

embracethered.com·3 pts·kerng·
0

Prompt Injections in the Wild – Exploiting LLM Agents – Hitcon 2023 [video]

youtube.com·3 pts·kerng·
0

GitHub Copilot: From Prompt Injection to Data Exfiltration

embracethered.com·7 pts·kerng·
0

Automatic Tool Invocation When Browsing with ChatGPT – Threats and Mitigations

embracethered.com·4 pts·kerng·
0
Page 1 of 9Next →