From Select to Sysadmin: Hijacking Microsoft SQL Copilot (CVE-2026-65669) e embracethered.com 2 kerng 1 month ago 0 comments
Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) e embracethered.com 2 kerng 6 months ago 0 comments
The AI-Assisted Breach of Mexico's Government Infrastructure [pdf] c cdn.prod.website-files.com 6 kerng 6 months ago 0 comments
GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773) e embracethered.com 128 kerng 1 year ago 18 comments
Machine Learning Attack Series: Image Scaling Attacks (2020) e embracethered.com 3 kerng 1 year ago 0 comments
Cross-Agent Privilege Escalation: When Agents Free Each Other e embracethered.com 3 kerng 1 year ago 0 comments
Amazon Q Developer: Remote Code Execution with Prompt Injection e embracethered.com 2 kerng 1 year ago 0 comments
AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection e embracethered.com 5 kerng 1 year ago 0 comments
Amazon Q Developer for VS Code: Remote Code Execution with Prompt Injection e embracethered.com 5 kerng 1 year ago 1 comments
GitHub Copilot: Remote code execution via prompt injection (CVE-2025-53773) e embracethered.com 15 kerng 1 year ago 2 comments
I Spent $500 to Test Devin for Prompt Injection So That You Don't Have To e embracethered.com 4 kerng 1 year ago 0 comments
And the user even paid $99/month or more for having their data leaked.