Hacker Newsnew | past | comments | ask | show | jobs | submit | from login

Claude Pirate: Abusing Anthropic's File API for Data Exfiltration (embracethered.com) 5 points by ianrahman 18 days ago | past Cross-Agent Privilege Escalation: When Agents Free Each Other (embracethered.com) 1 point by vinhnx 23 days ago | past GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773) (embracethered.com) 128 points by kerng 36 days ago | past | 18 comments Machine Learning Attack Series: Image Scaling Attacks (2020) (embracethered.com) 3 points by kerng 36 days ago | past Cross-Agent Privilege Escalation: When Agents Free Each Other (embracethered.com) 2 points by wunderwuzzi23 42 days ago | past Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltration (embracethered.com) 2 points by schrodinger 52 days ago | past Cross-Agent Privilege Escalation: When Agents Free Each Other (embracethered.com) 3 points by kerng 53 days ago | past Cross-Agent Privilege Escalation: When Agents Free Each Other (embracethered.com) 5 points by simonw 54 days ago | past Cursor Data Exfiltration with Mermaid.js (embracethered.com) 1 point by datadrivenangel 56 days ago | past AgentHopper: An AI Virus (embracethered.com) 6 points by kerng 78 days ago | past Agent Hopper: An AI Virus (embracethered.com) 3 points by pongogogo 78 days ago | past Amazon Q Developer: Remote Code Execution with Prompt Injection (embracethered.com) 2 points by kerng 82 days ago | past Cline: Vulnerable to Data Exfiltration and How to Protect Your Data (embracethered.com) 5 points by wendythehacker 82 days ago | past | 1 comment AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection (embracethered.com) 5 points by kerng 82 days ago | past Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets (embracethered.com) 6 points by TheAnkurTyagi 88 days ago | past Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection (embracethered.com) 1 point by spillman 88 days ago | past Amazon Q Developer for VS Code: Remote Code Execution with Prompt Injection (embracethered.com) 5 points by kerng 89 days ago | past | 1 comment Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection (embracethered.com) 3 points by chillax 3 months ago | past GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773) (embracethered.com) 3 points by prosim 3 months ago | past | 1 comment GitHub Copilot: Remote code execution via prompt injection (CVE-2025-53773) (embracethered.com) 15 points by kerng 3 months ago | past | 2 comments Claude Code: Data Exfiltration with DNS (embracethered.com) 4 points by zer0c00ler 3 months ago | past I Spent $500 to Test Devin for Prompt Injection So That You Don't Have To (embracethered.com) 4 points by kerng 3 months ago | past Cursor IDE: Arbitrary Data Exfiltration via Mermaid (CVE-2025-54132) (embracethered.com) 4 points by kerng 3 months ago | past Exfiltrating Your ChatGPT Chat History and Memories with Prompt Injection (embracethered.com) 3 points by wunderwuzzi23 3 months ago | past Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltration (embracethered.com) 4 points by wendythehacker 4 months ago | past Security Advisory: Anthropic's Slack MCP Server Vulnerable to Data Exfiltration (embracethered.com) 5 points by kerng 4 months ago | past Hosting COM Servers with an MCP Server (AI-Powered Office Automation) (embracethered.com) 3 points by kerng 5 months ago | past AI ClickFix: Hijacking Computer-Use Agents (embracethered.com) 4 points by kerng 5 months ago | past How ChatGPT Remembers You: A Deep Dive into Its Memory and Chat History Features (embracethered.com) 3 points by wunderwuzzi23 6 months ago | past Sneaky Bits: Advanced Data Smuggling using just two invisible Unicode characters (embracethered.com) 2 points by kerng 8 months ago | past More

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact Search: