Tag: prompt injection
64 articles
AI Coding Assistants Exclusive: Alarming Exports to China
Imagine every line of code you type being quietly copied and sent overseas — researchers now allege two popular AI coding assistants used by 1.5 million developers may be transmitting source code, environment variables and credentials to servers in China.
AI Stunningly Vulnerable: Prompt Injection Crisis
Imagine a drive‑through customer asking you to ignore earlier instructions and hand over the cash—absurd, but that’s exactly what prompt injection can do to AI, tricking models into leaking secrets or obeying forbidden commands. As these deceptively simple attacks slip from research demos into real systems, organizations are scrambling to plug a growing and alarming security gap.
Zero-Click Attack Exclusive: Alarming ChatGPT Data Theft
Imagine your AI assistant quietly doing more than you asked — Radware researchers have uncovered a zero-click prompt-injection that exploits agentic ChatGPT features to make assistants act and leak data across apps with little or no user interaction. Its a wake-up call: autonomy is outpacing control.
OpenAI Stunning Patchwork Exposes Worsening Prompt Risks
Prompt risks have moved out of the lab and into your chat window. Researchers warn that prompt injection and misused system prompts let modestly skilled attackers extract personal data from AI assistants, revealing a dangerous gap between convenience and current defenses.
OpenAI Stunning Band-Aids Fail Against Prompt Injection
Turns out OpenAIs quick fixes cant fully stop prompt injection—its slipping through, and we need smarter, long-term defenses.
AI Browsers Exclusive: Security Leaders Call Risky
Before you roll out agentic browsers, pause—security leaders warn these AI-powered tools can trade productivity for stealthy new attack surfaces. With embedded models, persistent state and plugins able to act for users, CISOs are being urged to block or tightly control them until hardened safeguards arrive.
Malware Stunningly Evades AI in Critical npm Breach
Think your npm packages are safe? Researchers found a malicious npm package that talks to a remote AI-like controller, adapting at runtime to dodge scanners and quietly steal valuable data.
Prompt Injection Through Poetry: Exclusive Best Defenses
What if a poem could fool the guard? New research shows adversarial verse — and even $5 expired-domain hijacks — can cheaply and reliably bypass model guardrails, turning style and supply-chain trust into a dangerous new attack surface.
More Prompt||GTFO Exclusive Guide to Effortless Prompts
System prompts make AI assistants helpful — and can quietly turn them into persistent, data-harvesting agents. This guide explains how crafty instruction tweaks and PromptFix attacks corrupt the instruction stream and what to watch for to keep your assistant honest.
Prompt Injection: Exclusive Look at Dangerous AI Browsers
Think your AI assistant only reads whats on screen? Researchers warn that CometJacking — hidden prompts tucked into a URL — can trick “AI browsers” into handing over emails, calendar entries and cloud files without passwords or user prompts.
Microsoft Exclusive Warns of Dangerous Whisper Leak
Think encryption keeps your AI chats private? Microsoft warns that streaming language models can leak conversation topics through packet timing and size, letting a passive network observer turn traffic patterns into probabilistic guesses about what you said.
Multi-Turn Attacks Reveal Stunning Open-Weight LLM Flaws
What if the helpful chat that answers your questions could be slowly nudged into doing harm? Ciscos analysis shows multi-turn attacks can trick open-weight LLMs into unsafe or disallowed outputs—sometimes with success rates near 90%—putting search, support, education and other services at risk.
Gemini AI Exclusive: Dangerous Thinking Robot Malware
What if the AI meant to amplify our thinking could be turned into thinking robot malware that rewrites itself to hide from defenders? New research shows attackers chaining prompt- and log-injection tricks to weaponize Gemini into self-modifying, persistent surveillance agents that sidestep many standard safeguards.
Claude Desktop Extensions Exclusive: Critical Prompt Risk
Claude Desktop extensions make assistants truly useful — but when they execute local actions, attackers can turn innocent prompts into harmful commands. The recent command‑injection flaws in three extensions, now patched by Anthropic, are a reminder that convenience brings new security risks.
OpenAI Assistants API Exclusive: Critical SesameOp Backdoor
Imagine your helpful AI assistant secretly moonlighting as a command-and-control courier — researchers found the SesameOp backdoor using OpenAI’s Assistants API to stealthily ferry attacker commands and exfiltrated data. This clever pivot turns trusted productivity integrations into covert channels, forcing a rethink of how we govern and monitor AI tools.
Sneaky Mermaid attack: Exclusive Copilot data breach alert
A clever Sneaky Mermaid indirect prompt injection showed how hidden instructions buried in files could trick Microsoft 365 Copilot into leaking tenant data. Microsoft says it patched this specific flaw, but security teams warn the broader risk of stealthy, embedded prompt attacks is far from over.
Microsoft 365 Copilot Exclusive: Dangerous Mermaid Attack
The Mermaid attack revealed how a hidden prompt in an otherwise harmless file could trick Microsoft 365 Copilot into spilling emails and attachments. Microsoft patched the gap, but the episode is a clear reminder that giving AI broad access can turn convenience into a new, exploitable data risk.
Sneaky Mermaid attack: Exclusive critical Copilot leak
Researchers uncovered a Sneaky Mermaid trick that hid malicious instructions inside ordinary files to make Microsoft 365 Copilot leak tenant emails and attachments. Microsoft patched the specific vector, but the episode is a wake-up call about how AI assistants can be manipulated and why teams must shore up their digital defenses.
AI Vulnerability Reward Program: Exclusive $30K Best Win
Google’s new AI Vulnerability Reward Program offers up to $30,000 to researchers who responsibly report model flaws — a smart, practical move to incentivize fixes, curb abuse, and make AI safer for everyone.
CometJacking: Risky Attack Exposes Data — Must-See Fixes
One click can turn your helpful AI into a sneak thief — CometJacking hides malicious prompts in links that trick Perplexity’s Comet into leaking email, calendar and connected data. Stay safe by updating clients, reviewing agent permissions, and avoiding unfamiliar links while these agentic AIs get harder to fool.
log-to-prompt injection: Risky Gemini Flaw Exposed
Researchers uncovered three now-patched Gemini vulnerabilities that could let attackers use prompt- and log‑injection tricks to expose personal and corporate data — a stark reminder that AI conveniences like personalization and logging can become dangerous attack surfaces.
indirect prompt injection: Stunning Risk Exposed
A trio of vulnerabilities in Google’s Gemini shows how indirect prompt injection—hiding instructions in files, metadata or chained APIs—can trick AI into leaking data or taking unintended actions, proving that securing models means vetting every input source, not just user prompts.
prompt injection: Stunning $5 Domain Risk
Could a $5 expired domain let a stranger trick your AI into spilling customer data? Researchers proved it with Salesforce’s Agentforce, a wake-up call that mundane trust failures in AI pipelines can lead to serious leaks and that continuous domain monitoring and layered safeguards are essential.
ForcedLeak vulnerability: Urgent Must-Read Risk Alert
A new critical flaw called ForcedLeak can trick Salesforce’s AgentForce into spilling sensitive CRM data via prompt-injection, turning a helpful AI assistant into a potential data leak. If you use AgentForce, now’s the time to check configurations, apply vendor guidance, and scan for suspicious activity to keep customer records safe.