Embrace The Red embracethered.com

Windsurf: Memory-Persistent Data Exfiltration (SpAIware Exploit)

embracethered.com·38w

Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets

embracethered.com·39w·Hacker News

Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection

embracethered.com·39w·Hacker News

Amazon Q Developer: Remote Code Execution with Prompt Injection

embracethered.com·39w·Hacker News

Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection

embracethered.com·39w·Hacker News

Data Exfiltration via Image Rendering Fixed in Amp Code

embracethered.com·39w

Amp Code: Invisible Prompt Injection Fixed by Sourcegraph

embracethered.com·39w

Google Jules is Vulnerable To Invisible Prompt Injection

embracethered.com·39w

Jules Zombie Agent: From Prompt Injection to Remote Control

embracethered.com·40w

Google Jules: Vulnerable to Multiple Data Exfiltration Issues

embracethered.com·40w

GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)

embracethered.com·40w·Hacker News, Hacker News

Claude Code: Data Exfiltration with DNS

embracethered.com·40w·Hacker News

OpenHands ZombAI Exploit: Prompt Injection To Remote Code Execution

embracethered.com·40w

OpenHands and the Lethal Trifecta: Leaking Your Agent's Secrets

embracethered.com·40w

AI Kill Chain in Action: Devin AI Exposes Ports to the Internet with Prompt Injection

embracethered.com·40w

How Devin AI Can Leak Your Secrets Via Multiple Means

embracethered.com·41w

I Spent $500 To Test Devin For Prompt Injection So That You Don't Have To

embracethered.com·41w·Hacker News

Amp Code: Arbitrary Command Execution via Prompt Injection Fixed

embracethered.com·41w

Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132)

embracethered.com·41w·Hacker News, Hacker News

Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation

embracethered.com·41w

Log in to enable infinite scrolling