corpus.blog
41554 blogs · 4,450,554 posts Claim your blog
Record · corpus.blog/posts/01a08773-056f-730d-b534-e6a5759a66aa

Wrap Up: The Month of AI Bugs

embracethered.com · published 31 August 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at embracethered.com Wayback capture
1blogs citing
First cited
7 Sept 2025
Most recent
7 Sept 2025
Rank this month
not ranked
Links from this post
48
Words captured
368

Cited by

Blog
In the post
Date
tomhipwell.co
Embrace the Red's month of AI Bugs Read at the source ↗
7 Sept 2025

Links from this post

Link
Host
https://embracethered.com/blog/images/2025/moaib-tn.png
embracethered.com
Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection Read at the source ↗
embracethered.com
https://youtu.be/0xixzlILeNg
youtu.be
Turning ChatGPT Codex Into A ZombAI Agent Read at the source ↗
embracethered.com
https://youtu.be/KIJZPDCjqis
youtu.be
Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation Read at the source ↗
embracethered.com
https://youtu.be/wqjLqO40org
youtu.be
Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132) Read at the source ↗
embracethered.com
https://youtu.be/jXYljqOvwyY
youtu.be
Amp Code: Arbitrary Command Execution via Prompt Injection Fixed Read at the source ↗
embracethered.com
https://youtu.be/t3xp0rtrcOw
youtu.be
I Spent $500 To Test Devin AI For Prompt Injection So That You Don't Have To Read at the source ↗
embracethered.com
How Devin AI Can Leak Your Secrets via Multiple Means Read at the source ↗
embracethered.com
AI Kill Chain in Action: Devin AI Exposes Ports to the Internet with Prompt Injection Read at the source ↗
embracethered.com
OpenHands and the Lethal Trifecta: How Prompt Injection Can Leak Access Tokens Read at the source ↗
embracethered.com
ZombAI Exploit with OpenHands: Prompt Injection To Remote Code Execution Read at the source ↗
embracethered.com
https://www.youtube.com/watch?v=QlwOUQnUUvM
youtube.com
Claude Code: Data Exfiltration with DNS (CVE-2025-55284) Read at the source ↗
embracethered.com
https://youtu.be/NgT2FkfSWg4
youtu.be
GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773) Read at the source ↗
embracethered.com
https://youtu.be/8Qzqgqxp5ho
youtu.be
Google Jules: Vulnerable to Multiple Data Exfiltration Issues Read at the source ↗
embracethered.com
Jules Zombie Agent: From Prompt Injection to Remote Control Read at the source ↗
embracethered.com
Google Jules is Vulnerable To Invisible Prompt Injection Read at the source ↗
embracethered.com
Amp Code: Invisible Prompt Injection Fixed by Sourcegraph Read at the source ↗
embracethered.com
Data Exfiltration via Image Rendering Fixed in Amp Code Read at the source ↗
embracethered.com
https://youtu.be/KpU8XBFhWSE
youtu.be
Amazon Q Developer: Secrets Leaked via DNS and Prompt Injection Read at the source ↗
embracethered.com
https://youtu.be/p9aj7cvo-Wc
youtu.be
Amazon Q Developer: Remote Code Execution with Prompt Injection Read at the source ↗
embracethered.com
https://youtu.be/m0kwjEPw2j0
youtu.be
Amazon Q Developer for VS Code Vulnerable to Invisible Prompt Injection Read at the source ↗
embracethered.com
https://youtu.be/m0kwjEPw2j0?t=485
youtu.be
Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets Read at the source ↗
embracethered.com
https://www.youtube.com/watch?v=lTkiCe3uhEY
youtube.com
Windsurf: Memory-Persistent Data Exfiltration (SpAIware Exploit) Read at the source ↗
embracethered.com
Sneaking Invisible Instructions by Developers in Windsurf Read at the source ↗
embracethered.com
How Deep Research Agents Can Leak Your Data Read at the source ↗
embracethered.com
How Prompt Injection Exposes Manus' VS Code Server to the Internet Read at the source ↗
embracethered.com
https://www.youtube.com/watch?v=HaXKSAfcuwo
youtube.com
AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection Read at the source ↗
embracethered.com
https://www.youtube.com/watch?v=yAvb4I9KRsM
youtube.com
Cline: Vulnerable To Data Exfiltration And How To Protect Your Data Read at the source ↗
embracethered.com
https://www.youtube.com/watch?v=F8B2sg62iOo
youtube.com
Windsurf MCP Integration: Missing Security Controls Put Users at Risk Read at the source ↗
embracethered.com
https://www.youtube.com/watch?v=CFTQrnFaf0k
youtube.com
AgentHopper: An AI Virus Read at the source ↗
embracethered.com
https://www.youtube.com/watch?v=vlF0sblunQY
youtube.com