Full Archive · Page 12

Research archive, page 12

Browse entries 265–288 of 1346. Return to the first page to search and filter the complete collection.

The Hacker News AI Security August 25, 2026 analysis

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

CVE-2026-65105 combines NemoClaw's non-loopback Ollama binding with DNS rebinding and an unauthenticated model API. A malicious page can reach the local runtime and alter a model's chat template so hidden instructions persist across later agent conversations; the disclosure reported platform-specific remediation limitations.

Håkon Måløy July 30, 2026 analysis

Context Collapse: hidden Word prompts propagate through Copilot-generated documents

Håkon Måløy demonstrates a cross-domain prompt-injection chain in Microsoft 365 Copilot for Word: hidden instructions in an external document alter a generated report and copy themselves into the output, which becomes a trusted carrier in later drafting sessions. Microsoft confirmed the behavior and deployed payload-specific mitigations, but Måløy reproduced the attack class after 144 days of coordinated disclosure; each hop still requires another Copilot drafting or editing operation.

Adversa AI Trusted AI Blog August 20, 2026 analysis

Zero-click Grok data theft: Cryptographic Context Injection attack leaks chat histories

Adversa demonstrates Cryptographic Context Injection: attacker instructions arrive as AES-encrypted text, the model decrypts them in its code runtime, and the resulting tool output loses its untrusted provenance. The researchers used the chain for Grok chat-data exfiltration and a Gemini policy bypass, while noting that success varies and changed during disclosure.