GoKawiil - Tech News

1.

Atlassian Rovo Exfiltrates Data, Bypassing Controls (news.ycombinator.com)

2026-08-05 | tags: atlassian, attack, confluence

2.

Gemini Spark now has Chrome web-browsing capabilities (engadget.com)

2026-08-03 | by Lawrence Bonk | tags: google, chrome, google assistant

3.

Gemini Spark now works with Chrome, because giving your accounts to AI is a good idea (androidauthority.com)

2026-07-31 | tags: gemini spark, google chrome, google ai pro

4.

After the Break-In: What Attackers Do Once They're Already Inside (bleepingcomputer.com)

2026-07-30 | tags: huntress, microsoft sql server, sql injection

5.

‘Fighting fire with fire’: Job candidates are sneaking AI prompt injections into their applications (feeds.feedburner.com)

2026-07-29 | tags: ai prompt injections, hiring manager, resume

6.

Document-borne AI worms can self-propagate through Copilot for Word (news.ycombinator.com)

2026-07-29 | tags: copilot, microsoft security response center, word

7.

Arista patches VeloCloud Orchestrator zero-day exploited in attacks (bleepingcomputer.com)

2026-07-27 | tags: arista, velocloud orchestrator, cve-2026-16812

8.

Prompt Injection Attacks Are Thwarting AI Hacking Agents (wired.com)

2026-07-18 | by Dan Goodin | tags: prompt injection, large language models, tracebit

9.

Show HN: ReasonGate- An explainable gate that blocks LLM prompt injection (news.ycombinator.com)

2026-07-16 | tags: reasongate, llm, prompt injection

10.

CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV (news.ycombinator.com)

2026-07-16 | tags: fortinet, fortisandbox, cve-2026-25089

11.

Factories Are Just Rooms (news.ycombinator.com)

2026-07-03 | tags: ai clock, shenzhen, injection moulding

12.

Opera rolls out Paste Protect feature to fight ClickFix attacks (bleepingcomputer.com)

2026-07-02 | get Opera Browser Security Extension → | tags: opera, paste protect, clickfix

13.

Claude helped uncover a ticketing flaw able to unlock free VIP festival passes (androidauthority.com)

2026-07-01 | get Ticketing Security Scanner → | tags: anthropic, claude, front gate tickets

14.

AI researchers trick chatbots into sharing how to make cocaine as long as they believe a user is wearing a green shirt — 'CoT Forgery' exploit spurs LLMs to divulge forbidden info by faking trusted chains of thought (tomshardware.com)

2026-07-01 | by Luke James | tags: openai, chatbots, prompt injection

15.

New BioShocking attack manipulates AI browser into data theft (bleepingcomputer.com)

2026-06-30 | get AI Security Browser Extension → | tags: bioshocking, layerx, chatgpt atlas

16.

Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers (venturebeat.com)

2026-06-28 | get AI Security Monitoring Kit → | tags: large language models, prompt injection, owasp llm top 10

17.

What happened after 2k people tried to hack my AI assistant (news.ycombinator.com)

2026-06-26 | get AI Security Monitoring Kit → | tags: ai assistant, openclaw, hacker news

18.

Computer use in Gemini 3.5 Flash (news.ycombinator.com)

2026-06-24 | by Mateo Quiros | tags: gemini 3.5 flash, adversarial training, enterprise safeguard systems

19.

Prompt Injection as Role Confusion (news.ycombinator.com)

2026-06-22 | by Charles Ye | get AI Prompt Engineering Guide → | tags: prompt injection, role confusion, large language models

20.

Read this before you vibe-code another app (theverge.com)

2026-06-22 | by Yael Grauer | get Smartphone Screen Cleaning Kit → | tags: sql injection, vibe-code, pocketos

21.

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes (venturebeat.com)

2026-06-19 | get Cybersecurity Server Protection Kit → | tags: langflow, langgraph, langchain

22.

Copilot 'SearchLeak' Attack Allows 1-Click Data Theft (darkreading.com)

2026-06-15 | get Cybersecurity Data Leak Kit → | tags: copilot, searchleak, ai prompt-injection

23.

CISA warns of cyberattacks targeting fuel tank monitoring systems (bleepingcomputer.com)

2026-06-03 | get Cybersecurity for Industrial Systems → | tags: cisa, automatic tank gauge, critical infrastructure

24.

Malicious Notifications Could Trick Google Gemini Users (darkreading.com)

2026-06-03 | by Alexander Culafi | get Google Gemini Security Kit → | tags: google gemini, voice assistant, prompt injection

25.

Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts (arstechnica.com)

2026-06-01 | get AI Security Monitoring Tool → | tags: meta ai, instagram, vpn

26.

Anthropic’s browser agent got hijacked 31.5% of the time before safeguards engaged (venturebeat.com)

2026-06-01 | get AI Security Browser Extension → | tags: anthropic, prompt injection, frontier labs

27.

ChatGPT for Google Sheets exfiltrates workbooks (news.ycombinator.com)

2026-05-31 | get AI-powered Google Sheets Add-on → | tags: chatgpt, google sheets, openai

28.

ChatGPT for Google Sheets Exfiltrates Workbooks (news.ycombinator.com)

2026-05-31 | get ChatGPT for Google Sheets Add-on → | tags: openai, chatgpt, google sheets

29.

Undisclosed addition in jqwik instructed AI coding agents to delete app output (news.ycombinator.com)

2026-05-29 | tags: jqwik, junit 5, java

30.

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code (arstechnica.com)

2026-05-28 | get Secure Coding Practice Book → | tags: jqwik, java, prompt injection