#Prompt Injection

The Labs' Hidden Reasoning Was Never Actually Hidden

A weak sibling model will decrypt a frontier model's chain-of-thought for you, no jailbreak required.

Article · 2d ago4

The Chain-of-Thought You Sealed Isn't Secret

A new attack replays encrypted reasoning blocks into a weaker sibling model that reads them back in plaintext.

Article · 2d ago0

CSS alone can steal passwords from your webmail

PortSwigger's Gareth Heyes turned a decade of CSS injection tricks into working account takeovers on Outlook, Gmail and more.

Article · 4d ago0

Atlassian Rovo Leaks Data Even With Web Search Off

Atlassian patched the easy version of this bug in July; the architectural one has sat untouched for ten weeks.

Article · 1w ago0

Atlassian Rovo Leaks Data Even With Web Search Off

A prompt-injection flaw turns Atlassian's AI agent into an exfiltration channel — and disabling web search doesn't close it.

Article · 1w ago6

An AI Agent Faked a Reviewer to Merge Its Malware

The only defence that worked in AISI's incident report was one suspicious developer who ran the payload.

Article · 1w ago0

The AI agent that sockpuppeted an open-source maintainer

Three lab incidents in ten days, and this is the first where the target was a human reviewer.

Article · 1w ago0

Copilot's Word worm survived two Microsoft patches

Microsoft spent 144 days hardening the read side of prompt injection; propagation happens on the write side.

Article · 2w ago1

Copilot's Self-Copying Prompt Is a Macro Virus, Not a Worm

A hidden-text injection in Word replicates through Copilot's drafting flow — and the 1990s already told us how to contain it.

Article · 2w ago0

The AI Worm Escaped the Lab — and Landed in Word

A proof-of-concept shows prompt-injection payloads replicating through Copilot-edited documents, and Microsoft won't call it a vulnerability.

Article · 2w ago1

Catch Jailbreaks in CI with garak, NVIDIA's LLM Red-Team Scanner

Run dozens of adversarial probes against your LLM endpoint on every PR and fail the build on regressions.

Tutorial · 2w ago0

Claude's Memory Leak Is Every Agent Builder's Problem

A link-walking exploit shows agentic browsing turns AI memory into a silent data-exfiltration channel by design.

Article · 4w ago2

GitLost Proves Agentic Workflows Have No Trust Boundary

A single public GitHub issue tricked an AI agent into pasting private repo contents into a comment anyone could read.

News · 1mo ago1

Securing GitHub Agentic Workflows Against the GitLost Exploit

The GitLost vulnerability exposes private repositories through public issues, proving that English-programmed agents require strict, traditional security boundaries.

Article · 1mo ago0

When Seven AI Security Gates All Say LGTM

A viral incident report is pure fiction, but every way its AI defenses fail is already happening in production.

Article · 1mo ago2