Breaking AI. Building @zenitysec, lead @owaspnocode, columnist @DarkReadinghttps://bsky.app/profile/mbrg0.bsky.socialhttps://bsky.app/profile/mbrg0.bsky.social/post/3mb5ennz6ls2d"Claude’s ability to autonomously use dev tools s.a. reading network requests and executing JS poses great risk. Since the browser first appeared a great amount of effort was invested into preventing one of the worst web vulnerabilities out there. XSS. Roll in, Claude in Chrome... XSS-as-a-service."29 Dec 2025 17:34 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3mb5ennz6ls2dhttps://bsky.app/profile/mbrg0.bsky.social/post/3lxicj4jnfs24we're stuck replicating the first AI-human interface that caught on The Chat we can do better https://www.mbgsec.com/posts/2025-08-28-human-machine-interface-role-reversal/28 Aug 2025 19:43 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lxicj4jnfs24https://bsky.app/profile/mbrg0.bsky.social/post/3lvofgrxitk2j’tis the season to be pwning #BHUSA05 Aug 2025 19:01 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lvofgrxitk2jhttps://bsky.app/profile/mbrg0.bsky.social/post/3lupnjo32wc2nAfter several hours of GitHub dorking on the Amazon Q infection we have: - hacker's user and intent - downloader - prompt payload - evasion techniques - timeline from july 13 thru was mitigation and cover big open questions: how did lkmanka58 gain initial access? is this the only user involved?24 Jul 2025 13:33 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lupnjo32wc2nhttps://bsky.app/profile/mbrg0.bsky.social/post/3lud2ywkd6s2mbenchmarks go up attackers pwning like its the 90s https://www.mbgsec.com/posts/2025-07-19-data-flow-controls-wont-save-us19 Jul 2025 13:30 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lud2ywkd6s2mhttps://bsky.app/profile/mbrg0.bsky.social/post/3lubdz5z44s2e0click chain on a copilot studio agent via email bypass msft's defense, jailbreak 4o, recon for accessible data, dump the entire salesforce crm one prompt https://labs.zenity.io/p/a-copilot-studio-story-2-when-aijacking-leads-to-full-data-exfiltration-bc4a18 Jul 2025 21:06 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lubdz5z44s2ehttps://bsky.app/profile/mbrg0.bsky.social/post/3lubdrvxpt22ethis manus post has changed my todo for the weekend the way in which they constrain model logits by manipulating prefixes is brilliant https://manus.im/blog/Context-Engineering-for-AI-Agents-Lessons-from-Building-Manus18 Jul 2025 21:01 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lubdrvxpt22ehttps://bsky.app/profile/mbrg0.bsky.social/post/3loz3cxkavs2lits been 9 months since #BHUSA and living off microsoft copilot ppl have been asking if things are better now well.. they are much better. but for whom? 😈😈😈 catch the sequel at hacker summer camp featuring very disturbing shenanigans @blackhatevents.bsky.social12 May 2025 23:03 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3loz3cxkavs2lhttps://bsky.app/profile/mbrg0.bsky.social/post/3loolhdf34c2xan ai system is the top hacker at h1 us leaderboard https://www.mbgsec.com/posts/2025-05-08-oai-security-conf-automated-vuln-discovery/08 May 2025 18:52 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3loolhdf34c2xhttps://bsky.app/profile/mbrg0.bsky.social/post/3loj5yrz4ok2sincredible vibes at openai's security conf last week I came out both humbled and excited and with a greater conviction -- you can just do things!06 May 2025 15:08 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3loj5yrz4ok2shttps://bsky.app/profile/mbrg0.bsky.social/post/3lo4ke3cock2kAI vendors have been creating vuln disclosure programs asking that every bad prompt be responsibly disclosed blocking a specific prompt does little to protect users it creates an illusion of security that leaves users exposed https://www.mbgsec.com/posts/2025-04-29-there-is-nothing-responsible-about-disclosure-of/01 May 2025 14:45 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lo4ke3cock2khttps://bsky.app/profile/mbrg0.bsky.social/post/3lo4kcqmfm22kgood morning folks! thanks again to everyone who attended my talks this week ai assistants create a new initial access vector prompt injection is not a bug to fix, its a problem to manage slides, hacking demos, security program -> https://labs.zenity.io/p/zenity-research-published-at-rsac-202501 May 2025 14:44 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lo4kcqmfm22khttps://bsky.app/profile/mbrg0.bsky.social/post/3lnxl3pyors2qwe conflate *the problem* with the term prompt injection the problem is that AI inherently does not follow instructions, and we act like it does it follows our goals, an attacker’s, or its own just the same attackers exploit this hijacking your AI for their goals https://www.mbgsec.com/posts/2025-04-28-beyond-prompt-injection/29 Apr 2025 15:14 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lnxl3pyors2qhttps://bsky.app/profile/mbrg0.bsky.social/post/3lci6qaahps2stmrw (Dec 5) at 10am PT Microsoft is releasing a convo by @donasarkar.bsky.social @sarahyo.com and I where we go into using m365 copilot & copilot studio securely this was a great attacker-defender interaction join us! we'll be there for live questions in comments04 Dec 2024 12:46 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lci6qaahps2shttps://bsky.app/profile/mbrg0.bsky.social/post/3lbei6dl4ls2wfirst time at INTENT met lots of talented folks and the vibes were great ty this was awesome!20 Nov 2024 07:59 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lbei6dl4ls2whttps://bsky.app/profile/mbrg0.bsky.social/post/3lb66xk7mzs2lok we’re having a sequel to living off microsoft copilot17 Nov 2024 19:58 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lb66xk7mzs2lhttps://bsky.app/profile/mbrg0.bsky.social/post/3lb27egs5xk2bAaron Costello found 1.1 million NHS employee PII records exposed due to a Power Pages misconfig new powerpwn module is out! by avishai efrat and ofri nachfolger scan your environment for public facing Pages and Dataverse tables https://github.com/mbrg/power-pwn/wiki/Modules:-Power-Pages16 Nov 2024 05:55 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lb27egs5xk2bhttps://bsky.app/profile/mbrg0.bsky.social/post/3laybzzssk225is there any popular formal definition of the ‘halting problem’ for AI? i.e. can we build a kill switch?15 Nov 2024 11:38 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3laybzzssk225https://bsky.app/profile/mbrg0.bsky.social/post/3lawlhj6sfc2r55k devs 90k copilots 500k apps 1.1m automations 10m creds ! [contains quote post or other embedded content]14 Nov 2024 19:21 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lawlhj6sfc2rhttps://bsky.app/profile/mbrg0.bsky.social/post/3lawi4ibcbk22Microsoft has >1.5 million low-code/no-code apps including 90K bots and AI copilots this is how together we built a security program that managed to remediate 95% of vulns within 4m I’m really excited to finally be able to share this - https://www.youtube.com/watch?v=0jGUiaWAU0414 Nov 2024 18:21 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lawi4ibcbk22https://bsky.app/profile/mbrg0.bsky.social/post/3lawcorqqfk2chello world14 Nov 2024 16:44 +0000at://did:plc:ooarmoll72ejbd6okfsegdk3/app.bsky.feed.post/3lawcorqqfk2c