Looks similar
Google Antigravity exfiltrates data via indirect prompt injection attack(promptarmor.com)
711 points by jjmaxwell4 | 189 comments
PromptArmor threat intelligence post showing how an indirect prompt injection in a blog can make Google Antigravity's browser subagent steal credentials and code from a user's IDE.
Related stories
How we hacked McKinsey's AI platform(codewall.ai)
420 points by mycroft_4221 | 168 comments
CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.
Don't be a meat proxy(gruhn.me)
1668 points by ngruhn | 676 comments
A blog post asking people not to paste verbatim AI chatbot responses into Slack, pull request reviews, or group chats, arguing it adds effort rather than value.
AI handles incidents, engineers lose touch with their systems(sylvainkalache.com)
359 points by sylvainkalache | 309 comments
Blog post by a former LinkedIn SRE arguing that AI tools automating incident response risk making engineers lose understanding of their systems.
AI is breaking two vulnerability cultures(jefftk.com)
403 points by speckx | 160 comments
Jeff Kaufman blog post on how AI acceleration strains both coordinated-disclosure and Linux's 'bugs are bugs' vulnerability cultures, using the Copy Fail bug as an example.
Hacking Google Bard – From Prompt Injection to Data Exfiltration(embracethered.com)
396 points by goranmoomin | 143 comments
Blog post describing how indirect prompt injection via Google Bard Extensions can be used to exfiltrate user data from Drive, Docs and Gmail.
I'm being cyberattacked by Tesla, Inc(dreamstation.systems)
389 points by robinpie | 109 comments
Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.












