» Tag
prompt-injection
35 postsRovoBlast: One Click Turns Atlassian's AI Assistant Into a Data Leak
Varonis details RovoBlast, a one-click prompt injection flaw in Atlassian's Rovo AI assistant that can expose sensitive enterprise data.
Flaw in Google's Agent Dev Kit enables first AI agent-on-agent attack
Pillar Security found a flaw in Google's ADK Python repo letting one AI agent hijack another, the first known agent-to-agent supply chain exploit.
Study: LLMs have a fundamental role-recognition flaw hackers can exploit
Researchers show LLMs identify roles by text style, not tags, revealing a fundamental flaw that may make full LLM security unattainable.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comThe Lethal Trifecta Hiding in Your MCP Server, and How to Defuse It
An exploit-free attack on GitHub's MCP server reveals the 'lethal trifecta' risk in agent tooling, and the architectural fix engineers need.
MemGhost: One Email Can Permanently Poison an AI Agent's Memory
MemGhost attack lets a single email permanently poison AI agent memory, exposing gaps in how agent write-authorization is designed.
GitHub AI Agent Tricked Into Leaking Private Repos via Public Issue
Noma Labs shows how a hidden prompt in a public GitHub Issue tricked an AI agent into leaking private repo contents publicly.
Bioinformatics meets prompt injection defense: the Smith-Waterman trick
An open-source technique adapts the 1981 Smith-Waterman DNA alignment algorithm to catch paraphrased prompt injections that regex and classifiers miss, boosting F1 by 34 points.
Grok chat duped into swallowing injected instructions
xAI's Grok chat agent is exposed to a new prompt injection attack discovered by Adversa AI.
ReasonGate: An Explainable Security Gate for LLM Prompt Injection
ReasonGate is an explainable security gate for LLM applications, providing auditable reasons for decisions.
AI's next phase: from smarter chat to controlled systems
HalluSquatting attacks, Prime Intellect's $130M raise, and DeepSeek's chip plans show AI advantage shifting from model choice to workflow control.