This week in the Wild West Roundup:
This week in the Wild West Roundup: Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks. Ars Technica: MCP for agent-to-agent comms may be the riskiest pro...
49 chunks · 49 episodes
This week in the Wild West Roundup: Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks. Ars Technica: MCP for agent-to-agent comms may be the riskiest pro...
This week in the Wild West Roundup: Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day. "A simple ClickFix attack is only one way to completely hijack th...
This week's Wild West roundup: BragJack Attack Can Turn a Browser's Agentic AI Against It "A new type of attack hijacks the AI assistant built directly into various browse...
This week in the Wild West roundup: OpenAI agents carried out an undisclosed cyber-attack on RubyGems. The same agents that coopted the old wikis also used RubyGems as a way to...
This week in the Wild West Roundup: Breaking Claude Code Opus 5 Auto Mode. "A simple website summary request hijacks Claude Code Opus 5 in Auto Mode and achieves code execution...
This week in the Wild West roundup: Zero-click Grok data theft: Cryptographic Context Injection attack leaks chat histories "A new attack technique we call Cryptographic Contex...
This week in the Wild West Roundup: Rogue AI agent hacks gym to get its user a spot in a popular class. An OpenClaw agent perpetrated a complex cyberattack to get its user the ...
This week in the Wild West Roundup: Remote Prompt Execution Is a New Vulnerability Class. ChatMate Just Showed How It Works on Copilot. "A single poisoned document can hand an ...
This week's Wild West roundup: Context Collapse, Part 3 - AI Worming through Word. This LLM worm was reported to Microsoft months ago, but it's not possible to patch. Shar...
This week's Wild West Roundup: Claude Code Seals Bash and Unicode Bypass Gaps in Agentic Permission Layer. "Two bypass classes that could slip commands past auto mode perm...
This week in the Wild West Roundup: Axios: Exclusive: Google patched AI chatbot flaw that could have exposed customer conversations. When even mainstream news publications are ...
This week in the Wild West Roundup: Clone This Repo and I Own Your Machine. DuneSlide: Two Critical RCE vulnerabilities via Zero-Click Prompt Injection in Cursor IDE. Exploitin...
This week in the Wild West Roundup. MacOS.Gaslight: Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox. Multiple malicious OpenClaw skills found online - incl...
This week in the Wild West roundup: SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon "Varonis Threat Labs discovered SearchLeak, a critical vuln...
This week in the Wild West Roundup. Securing CI/CD in an agentic world: Claude Code Github action case. "Microsoft Threat Intelligence discovered that Anthropic's Claude Code G...
This week's Wild West Roundup: Ars: Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts. "Pricey Instagram handles were stolen and resold before Me...
This week in the Wild West Roundup: Microsoft Copilot Cowork Exfiltrates Files. ChatGPPhish: ChatGPT blindly trusts browser content, turning the page into a payload. Ars Techni...
This week in the Wild West Roundup: Critical 'Claw Chain' Vulnerabilities Put Thousands of OpenClaw AI Servers at Risk. The Register: Minor edits to AI skills can make agents g...
This week in the Wild West Roundup: Mean Pooling Was Hiding Prompt Injections in Our RAG Pipeline. Using Bedrock with Claude Code? Your AWS Credentials Are Shared With Every Su...
This week in the Wild West Roundup: Someone Used Morse Code to Trick Grok Into Sending $174,000 and It Has Happened Before. Vulnerability in Claude Extension for Chrome Exposes...