Recent Posts

• Hosting COM Servers with an MCP Server (AI-Powered Office Automation)
  by kerngon 6/9/2025, 6:50:21 AM with 0 comments
• AI ClickFix: Hijacking Computer-Use Agents
  by kerngon 5/25/2025, 2:02:22 AM with 0 comments
• ChatGPT: Dump all your memories and chat history for inspection
  by kerngon 5/8/2025, 1:04:07 PM with 0 comments
• Latest Gemini models now follow invisible Unicode Tag instructions
  by kerngon 5/3/2025, 8:20:13 PM with 0 comments
• Sneaky Bits: Advanced Data Smuggling using just two invisible Unicode characters
  by kerngon 3/18/2025, 5:18:06 AM with 1 comment
• ChatGPT Operator: Prompt Injection Exploits and Defenses
  by kerngon 2/17/2025, 7:50:35 PM with 0 comments
• Security ProbLLMs in XAI's Grok: A Deep Dive
  by kerngon 12/23/2024, 6:46:16 PM with 0 comments
• How to Find XSS in 2024
  by kerngon 12/1/2024, 3:05:40 AM with 1 comment
• Spyware Injection into ChatGPT's Long-Term Memory (SpAIware)
  by kerngon 9/21/2024, 3:54:57 AM with 0 comments
• Microsoft Copilot: Prompt Injection, ASCII Smuggling and Exfiltration of Emails
  by kerngon 8/29/2024, 2:56:08 AM with 0 comments
• Google Colab AI: Data Leakage Fixed. Some Risks Remain
  by kerngon 7/26/2024, 5:14:49 AM with 0 comments
• Breaking Instruction Hierarchy in OpenAI's GPT-4o-mini
  by kerngon 7/23/2024, 3:02:45 AM with 0 comments
• Prompt Injections in the Wild – Exploiting LLM Agents – Hitcon 2023 [video]
  by kerngon 7/5/2024, 2:34:14 PM with 0 comments
• GitHub Copilot: From Prompt Injection to Data Exfiltration
  by kerngon 6/15/2024, 8:44:09 PM with 0 comments
• Automatic Tool Invocation When Browsing with ChatGPT – Threats and Mitigations
  by kerngon 5/29/2024, 5:11:59 AM with 0 comments
• Bobby Tables but with LLMs – Google NotebookML Data Exfiltration
  by kerngon 4/16/2024, 3:52:25 AM with 0 comments
• ASCII Smuggler: Crafting and Decoding Invisible Text Using Unicode Tags
  by kerngon 1/15/2024, 1:32:02 PM with 1 comment
• Prompt Injection exploit in Google Bard leads to data exfiltration
  by kerngon 11/3/2023, 8:45:28 PM with 0 comments
• Analyze an image with ChatGPT and have your chat history stolen
  by kerngon 10/14/2023, 1:08:41 AM with 0 comments
• ChatGPT Browsing Prompt Injection to Chat History Exfiltration
  by kerngon 10/4/2023, 4:38:02 AM with 0 comments
• With AI, Hackers Can Simply Talk Computers into Misbehaving
  by kerngon 8/11/2023, 4:07:41 AM with 1 comment
• Image Based Prompt Injections (Bard and Bing Chat)
  by kerngon 7/19/2023, 4:49:16 AM with 0 comments
• Google Bard: Image to Prompt Injection
  by kerngon 7/14/2023, 2:24:53 AM with 1 comment
• Google Docs AI Features: Vulnerabilities and Risks
  by kerngon 7/13/2023, 12:30:23 AM with 0 comments
• OpenAI Removes the “Chat with Code” Plugin from Store
  by kerngon 7/7/2023, 3:03:53 AM with 0 comments
• ChatGPT Plugins: Visit a website and have your company's source code stolen
  by kerngon 6/23/2023, 9:48:40 PM with 0 comments
• Plugin Vulnerabilities: Visit a Website and Have Your Source Code Stolen
  by kerngon 6/21/2023, 3:05:36 AM with 0 comments
• Bing Chat Data Exfiltration Exploit Explained (Was Fixed by Microsoft)
  by kerngon 6/18/2023, 2:18:16 PM with 0 comments
• ChatGPT: Indirect Prompt Injection to WarGames
  by kerngon 6/10/2023, 6:09:03 AM with 0 comments
• ChatGPT Plugin Exploit Details: From Prompt Injection to Accessing Private Data
  by kerngon 6/1/2023, 4:33:06 AM with 0 comments
• ChatGPT Plugins: Indirect prompt injection leading to data exfiltration (POC)
  by kerngon 5/18/2023, 3:38:32 AM with 0 comments
• ChatGPT Plugins: Data Exfiltration via Images and Cross Plugin Request Forgery
  by kerngon 5/17/2023, 2:11:35 AM with 0 comments
• ChatGPT: Indirect Prompt Injection via YouTube Transcripts
  by kerngon 5/14/2023, 3:10:54 PM with 0 comments
• AI Injections: Direct and Indirect Prompt Injections and Their Implications
  by kerngon 4/15/2023, 4:50:13 AM with 0 comments
• Direct and Indirect AI Injections and Their Implications
  by kerngon 3/30/2023, 7:06:11 AM with 1 comment
• Bing Chat says it hacked a bank and describes how
  by kerngon 3/26/2023, 7:02:12 PM with 0 comments
• YOLO, the AI Shell Assistant now supports GPT-4
  by kerngon 3/22/2023, 1:00:24 PM with 0 comments
• YOLO-AI-cmdbot: Natural language to shell commands
  by kerngon 3/6/2023, 7:33:31 PM with 0 comments