Sent out my weekly-ish newsletter – this edition covers the latest prompt injections, gpt-oss, GitHub Codespaces, Gemma 3 270M, Qwen-Image-Edit and how congress. gov uses XSLT! https://
simonw.substack.com/p/prompt-injec
tions-as-far-as-the-eye
…
CYBERSECURITY
-
Weekly AI digest: Prompt injections, open-source models, and development tools
By
–
-
Schaden-fraud: When Wrongdoers Repeat Their Acts
By
–
Schaden-fraud: that temporary feeling that fairness has restored itself, only for the wrongdoers to repeat their act!
-
AI and Cybercriminals Will Surpass History’s Greatest Criminals
By
–
AI + cybercriminals will outdo: -Pablo Escobar -Bernard Madoff -Al Capone -Arsène Lupin With AI, local crime is over. Global industrial theft begins!
-
PyPI’s New Protection Against Domain Resurrection Attacks
By
–
Notes on PyPI's new protection against domain resurrection attacks, where an attacker registers an expired domain in order to gain access to account reset emails
-
AI Misinformation Spreads Rapidly During Spain Wildfires Crisis
By
–
Cuidado!
— Juan Merodio (@juanmerodio) 18 août 2025
En momentos críticos, como es el caso de los terribles incendios que están arrasando España, la desinformación corre como la pólvora en redes sociales. Además, la aparición de la ia no ayuda… pic.twitter.com/guvsgNq8KVCuidado! En momentos críticos, como es el caso de los terribles incendios que están arrasando España, la desinformación corre como la pólvora en redes sociales. Además, la aparición de la ia no ayuda…
-
Privacy Risks Connecting AI Models to User Data
By
–
Connecting ChatGPT or other models to your data comes with some serious privacy implications. From a legal risk perspective, cases like the NYT vs OpenAI lawsuit is already putting all user queries at greater risk of exposure. Now imagine your chats including portions of your
-
Digital Security: Cultural and Ethical Imperative Beyond Technical Solutions
By
–
The presence of multiple threat actors underscores a broader issue: digital security is not just a technical challenge, but a cultural one that requires awareness, accountability, and ethical commitment at every level of the organization. Microblog @antgrasso #CyberSecurity
-
Wearable Devices as Neural Interfaces: Biometric Data Collection
By
–
yup. wearable devices are already biometric recorders on our bodies — effectively non-invasive neural interfaces.
-
Digital Chitragupta: Omnipresent Record Keepers and Surveillance
By
–
It seems we’re basically becoming okay with digital versions of chitragupta – omnipresent record keepers
-
LLM Security: Mixing Developer Instructions with Untrusted Input
By
–
Pretty much inherent to how we build software on top of LLMs – mixing developer instructions with untrusted user input is an anti-pattern that's baked into how we build this stuff