GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)(embracethered.com)

103 points by kerng 1 year ago | 15 comments

OpenAI Begins Tackling ChatGPT Data Leak Vulnerability(embracethered.com)

94 points by titaniumtown 2 years ago | 61 comments

Hacking Google Bard – From Prompt Injection to Data Exfiltration(embracethered.com)

396 points by goranmoomin 2 years ago | 143 comments

Blog post describing how indirect prompt injection via Google Bard Extensions can be used to exfiltrate user data from Drive, Docs and Gmail.

The security paradox of local LLMs(quesma.com)

117 points by jakozaur 1 year ago | 77 comments

Data exfiltration from Writer.com with indirect prompt injection(promptarmor.substack.com)

195 points by jackson-mcd 2 years ago | 74 comments

Escaping the Chrome Sandbox Through DevTools(ading.dev)

371 points by vk6 2 years ago | 72 comments

Blog post describing how the author found CVE-2024-6778 and CVE-2024-5836, Chromium bugs letting a malicious extension escape the sandbox via DevTools, earning a $20,000 bounty.