kerng
Re:Grok uploaded my user directory to xAI's servers
on Monday July 13, 2026 @12:11PM (#48894817)
What happened here is not related to agentic behavior or instructions in .md files. It's a binary a user runs, it scoops up their files and sends them to a third-party.
And the user even paid $99/month or more for having their data leaked.
Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)
The AI-Assisted Breach of Mexico's Government Infrastructure [pdf]
Re:CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Sourc...
on Sunday October 12, 2025 @12:47PM (#45559612)
Not the first time by the way. GitHub Copilot Chat: From Prompt Injection to Data Exfiltration https://embracethered.com/blog/posts/2024/github-copilot-cha...
GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)
Machine Learning Attack Series: Image Scaling Attacks (2020)
Month of AI Bugs (August 2025)
Cross-Agent Privilege Escalation: When Agents Free Each Other
AgentHopper: An AI Virus
Amazon Q Developer: Remote Code Execution with Prompt Injection
AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection
Amazon Q Developer for VS Code: Remote Code Execution with Prompt Injection
GitHub Copilot: Remote code execution via prompt injection (CVE-2025-53773)
I Spent $500 to Test Devin for Prompt Injection So That You Don't Have To
Cursor IDE: Arbitrary Data Exfiltration via Mermaid (CVE-2025-54132)
Re:MCP: An (Accidentally) Universal Plugin System
on Saturday June 28, 2025 @03:13PM (#44407335)
When I read about MCP the first time and saw that it requires a "tools/list" API reminded me of COM/DCOM/ActiveX from Microsoft, it had things like QueryInterface and IDispatch. And I'm sure that wasn't the first time someone came up with dynamic runtime discovery of APIs a server offers.
Interestingly, ActiveX was quite the security nightmare for very similar reasons actually, and we had to deal with infamous "DLL Hell". So, history repeats itself.