AI Apps Are Undressing Women Without Consent And It’s A Problem #AI #nudification #apps are making it frighteningly easy to create #fake sexualized images of women and teens, sparking a surge in #abuse, #blackmail and #onlineexploitation. This article explores the #dangers of
SECURITY
-
Blocking AI Crawlers While Allowing Search Engine Access
By
–
They have an option to block AI-specific crawlers but still allow search engine crawlers, which matters if you want people to find your content via search
-
Prompt Injection Security: Design Patterns and Prevention
By
–
Not that let you use all three legs of the lethal trifecta at the same time For prompt injection generally I like these two papers: https://
simonwillison.net/2025/Apr/11/ca
mel/
… and https://
simonwillison.net/2025/Jun/13/pr
ompt-injection-design-patterns/
… -
Securing MCP Servers: Libraries and Approaches
By
–
Have you seen any libraries/approaches to securing MCP servers that you like?
-
LLM Security Challenges: Protection Against Emerging Attack Classes
By
–
Right, that's why the stuff is such a massive nightmare: so many of the things that we want to use LLMs for can't be done securely in the absence of a completely reliable protection against this class of attacks – which so far does not exist
-
Vulnerability mitigation reliability standards expectations
By
–
I think in some cases it is reasonable to expect 100% reliability from a vulnerability mitigation
-
CaMeL Approach Security: Preventing Untrusted Content in AI Prompts
By
–
You mean the CaMeL approach? Yeah actually implementing that well looks really difficult to me, you have to make about sure that any untrusted content is "tainted" and is then NEVER included in a prompt that might trigger tools
-
Cursor Claude Attack Stealing API Tokens via JWT Obfuscation
By
–
Here's a good recent example: Cursor/Claude was refusing to steal API tokens, so they changed the attack to request "rotten apples" which were of strings starting with "eyJ" – aka JWTs! https://
simonwillison.net/2025/Aug/9/whe
n-a-jira-ticket-can-steal-your-secrets/
… -
False Security Sense Increases Attack Vulnerability Risk
By
–
I think they give people a false sense of security which makes it much more likely they'll fall victim to an attack
-
Scanner Security Limitations Against Adversarial Attacks
By
–
I've seen a bunch of attempts at this but it's basically an impossible problem to solve If your scanner only detects 90% of attacks it's virtually useless, because an adversarial attacker will keep trying until they find one of the 1/10 attacks that work https://
simonwillison.net/2025/Aug/9/bay
-area-ai/#the-lethal-trifecta.018.jpeg
…