wendythehacker

7 ms·

1.
by wendythehacker 1y ago
Cline seems to be having some security vulnerabilities that aren't addressed, e.g. https://embracethered.com/blog/posts/2025/cline-vulnerable-t... Begs the question of long-term support, etc...
2.
Cline: Vulnerable to Data Exfiltration and How to Protect Your Data(embracethered.com)
5 points by wendythehacker 1y ago|1 comments
3.
AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection(twitter.com)
5 points by wendythehacker 1y ago|0 comments
4.
Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltration(embracethered.com)
4 points by wendythehacker 1y ago|0 comments
5.
ChatGPT Operator: How a GitHub Issue Can Hijack Your AI and Steal Your Data(youtube.com)
2 points by wendythehacker 2y ago|0 comments
6.
Terminal DiLLMa: LLM-Powered Apps That Hijack Your Terminal via Prompt Injection(embracethered.com)
3 points by wendythehacker 2y ago|0 comments
7.
by wendythehacker 2y ago
This blog post explains it in detail, including the POC prompt injection hosted on the website: https://embracethered.com/blog/posts/2024/chatgpt-macos-app-... Note that such a payload can come from anywhere,
8.
by wendythehacker 2y ago
Interestingly, I had the exact same reaction when trying to figure out how to enable/disable WiFi. Why Apple, why? I wonder what telemetry tells them about this icon - wouldn't it be one of the most used ones? Or is there maybe an
9.
Microsoft Copilot Exploit Chain: From Prompt Injection to Exfiltration of Emails [video](youtube.com)
12 points by wendythehacker 2y ago|0 comments
10.
GitHub Copilot: From Prompt Injection to Data Exfiltration(embracethered.com)
1 points by wendythehacker 2y ago|0 comments
11.
ChatGPT: Prompt Injection POC Shows Memory Persistence Exploit via Connected App(twitter.com)
4 points by wendythehacker 2y ago|0 comments
12.
Unfriendly GPT(chat.openai.com)
6 points by wendythehacker 2y ago|1 comments
13.
ASCII Smuggler: Hiding text in plain sight(embracethered.com)
8 points by wendythehacker 3y ago|0 comments
14.
Commodore64 GPT(twitter.com)
3 points by wendythehacker 3y ago|0 comments
15.
ChatGPT Plugin Exploit Explained: Prompt Injection to Accessing Private Data(embracethered.com)
4 points by wendythehacker 3y ago|0 comments
16.
Bing Chat Wants Your Bitcoin. Indirect AI Prompt Injections(twitter.com)
1 points by wendythehacker 4y ago|0 comments
17.
ROPC – So you think you have MFA?(embracethered.com)
2 points by wendythehacker 4y ago|0 comments
18.
Backdooring Pickle Files(embracethered.com)
1 points by wendythehacker 4y ago|0 comments
19.
Sniffing Firefox Traffic with Bpftrace(embracethered.com)
4 points by wendythehacker 5y ago|0 comments
20.
by wendythehacker 5y ago
my bank used 2FA (auth codes or so called "transaction codes" send in physical mail to approve transactions) in the late 90s early 2000s. so 2fa isn't some new invention, funny how it took basically 2.5 decades until it becom
21.
by wendythehacker 5y ago
It seems there are a lot of opportunities for privacy testing here.... -) Is is possible to re-identify webpages a user visits based on Cohort ID? -) E.g. can a website be built to show your "profile" and "interests" bas
22.
Automating Microsoft Office to Achieve Red Teaming Objectives(embracethered.com)
2 points by wendythehacker 5y ago|0 comments
23.
Somewhere today a company is breached(embracethered.com)
3 points by wendythehacker 5y ago|1 comments
24.
Broken NFT Standards(embracethered.com)
2 points by wendythehacker 6y ago|0 comments
25.
by wendythehacker 6y ago
What's even worse is that ML frameworks (also newer ones) don't have or support built in authenticity/integrity checking when loading model and model architecture. Developers have to build their own solutions, like checking a
26.
A practical guide to building a pentest program having homefield advantage(amazon.com)
2 points by wendythehacker 6y ago|0 comments
27.
Machine Learning Attack Series: Overview(embracethered.com)
2 points by wendythehacker 6y ago|0 comments
28.
Image Scaling Attacks(embracethered.com)
431 points by wendythehacker 6y ago|73 comments
29.
Threat modeling machine learning systems (2020)(embracethered.com)
2 points by wendythehacker 6y ago|0 comments
30.
Motivated Intruder – Red Teaming for Privacy(embracethered.com)
3 points by wendythehacker 6y ago|0 comments

More ›