Embrace The Red embracethered.com

Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)

embracethered.com·2w·Hacker News

Breaking Opus 4.7 with ChatGPT (Hacking Claude's Memory)

embracethered.com·4w

Given Enough Agents, All Bugs Become Shallow

embracethered.com·6w

Agent Commander: Prompt-Based Command and Control

embracethered.com·9w

Scary Agent Skills: Hidden Unicode Instructions in Skills ...And How To Catch Them

embracethered.com·14w·Lobsters

OpenAI Explains URL-Based Data Exfiltration Mitigations in New Paper

embracethered.com·15w

Minting Next.js Authentication Cookies

embracethered.com·18w

Agentic ProbLLMs: Exploiting AI Computer-Use And Coding Agents (39C3 Video + Slides)

embracethered.com·20w

The Normalization of Deviance in AI

embracethered.com·23w

Antigravity Grounded! Security Vulnerabilities in Google's Latest IDE

embracethered.com·25w

Claude Pirate: Abusing Anthropic's File API For Data Exfiltration

embracethered.com·29w·Hacker News

Cross-Agent Privilege Escalation: When Agents Free Each Other

embracethered.com·34w·Lobsters, Hacker News, Hacker News

Wrap Up: The Month of AI Bugs

embracethered.com·37w

AgentHopper: An AI Virus Research Project

embracethered.com·37w·Hacker News, Hacker News

Windsurf MCP Integration: Missing Security Controls Put Users at Risk

embracethered.com·37w

Cline: Vulnerable To Data Exfiltration And How To Protect Your Data

embracethered.com·38w·Hacker News

AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection

embracethered.com·38w·Hacker News

How Prompt Injection Exposes Manus' VS Code Server to the Internet

embracethered.com·38w

How Deep Research Agents Can Leak Your Data

embracethered.com·38w

Sneaking Invisible Instructions by Developers in Windsurf

embracethered.com·38w

Log in to enable infinite scrolling