Tailscale SSH Tailworm explained: root-only sockets, version 1.104.4, plus Apple's git gap, Discord web search and the authors' suits against Anthropic.
Tailscale SSH Tailworm: what the fix in 1.104.4 closes
Related
My AI Agent Leaked Its Own Cloud Keys (Three Harmless Tools, One Chat Message)
A hands-on AI agent tool abuse lab. An internal helper with three harmless tools reads cloud keys and posts them to an attacker. Then we fix the tools in code.
A Hidden Paragraph on a Web Page Made My AI Agent Email My Secrets
A hands-on indirect prompt injection lab. An AI assistant summarises a blog post and quietly emails private notes to an attacker. Then we fix it in code.
One Message Made This AI Support Bot Give 100% Off (and How to Fix It in Code)
A hands-on prompt injection lab. One message gets a support chatbot to apply a 100% discount and leak its system prompt. Then we fix it in code and run the same attack again.