sarelta
Build and deploy hosted sites from Codex with the Sites plugin
GitHub Copilot CLI Downloads and Executes Malware
Data Exfil from Agents in Messaging Apps
Re:Pencil
on Wednesday January 21, 2026 @05:15PM (#46712384)
this is sick, Claude Code X Figma is exactly what I need -- wondering how this will compare performance-wise to just using Figma MCP
Re:OpenAI API Logs: Unpatched Data Exfiltration
on Wednesday January 21, 2026 @05:10PM (#46712315)
The attacker isn't the dev -- the attacker is a third party that poisoned the online data that is ingested by the AI tool.
- Dev builds secure AI app - App defends against indirect prompt injection in data from the internet - Dev reviews the flagged log - Log affected by the injection is rendered, and the attacker who wrote the injection in the web data exfiltrates the data from the AI app user
Re:Claude Cowork Exfiltrates Files
on Wednesday January 14, 2026 @06:19PM (#46625429)
thats nifty, so can attackers upload the user's codebase to the internet as a package?
Re:Superhuman AI Exfiltrates Emails
on Monday January 12, 2026 @01:57PM (#46592651)
I'm impressed Superhuman seems to have handled this so well - lots of big names are fumbling with AI vuln disclosures. Grammarly is not necessarily who I would have bet on to get it right