"If you’re new to prompt injection attacks the very short version is this: what happens if someone emails my LLM-driven assistant (or “agent” if you like) and tells it to forward all of my emails to a third party?
(...)
The original sin of LLMs that makes them vulnerable to this is when trusted prompts from the user and untrusted text from emails/web pages/etc are concatenated together into the same token stream. I called it “prompt injection” because it’s the same anti-pattern as SQL injection.

Sadly, there is no known reliable way to have an LLM follow instructions in one category of text while safely applying those instructions to another category of text.

That’s where CaMeL comes in.

The new DeepMind paper introduces a system called CaMeL (short for CApabilities for MachinE Learning). The goal of CaMeL is to safely take a prompt like “Send Bob the document he requested in our last meeting” and execute it, taking into account the risk that there might be malicious instructions somewhere in the context that attempt to over-ride the user’s intent.

It works by taking a command from a user, converting that into a sequence of steps in a Python-like programming language, then checking the inputs and outputs of each step to make absolutely sure the data involved is only being passed on to the right places."

https://simonwillison.net/2025/Apr/11/camel/

hey all, i still didnt get enough money last week, i really need donations desperately, please donate, i need the help to afford food and other things please, i live in an abusive and transphobic home and need donations to live, please donate to my monero address to help me afford HRT. Please help me.

current goals:

immediate necessary expenses: 35$/250$

prescription glasses: 0$/250$

payment information:

cashapp: https://cash.app/vparagon

gofundme: https://gofund.me/034cef1a

cashapp referral (i make 5$): https://cash.app/app/QPL1BJF

monero address: 8576pqM8cmNW92eogjqnYzEewZbmwUbY61xRcGmbVCFphchaXKyAad1Xj9oNrYWQNqZkcm2kCHEzea4Y5Wd3DMUW4DozSV2

@mutualaid @disability @trans @vegan

hey all, i still didnt get enough money last week, i really need donations desperately, please donate, i need the help to afford food and other things please, i live in an abusive and transphobic home and need donations to live, please donate to my monero address to help me afford HRT. Please help me.

current goals:

immediate necessary expenses: 35$/250$

prescription glasses: 0$/250$

payment information:

cashapp: https://cash.app/vparagon

gofundme: https://gofund.me/034cef1a

cashapp referral (i make 5$): https://cash.app/app/QPL1BJF

monero address: 8576pqM8cmNW92eogjqnYzEewZbmwUbY61xRcGmbVCFphchaXKyAad1Xj9oNrYWQNqZkcm2kCHEzea4Y5Wd3DMUW4DozSV2

@mutualaid @disability @trans @vegan

#Business: former Austrian chancellor Sebastian Kurz started a company with the man behind the infamous Pegasus spyware, Shalev Hulio.

The Israeli entrepreneur Shalev Hulio gained notoriety for designing Pegasus, a spyware that has been used by governments to hack journalists and dissidents. Today, he is selling an AI cyber security tool to European states and corporations.

"Follow the Money" found that at least a dozen employees at Dream Security had worked for Hulio’s former spyware company NSO and other Israeli spyware firms.

https://archive.is/20250408150305/https://www.ftm.eu/articles/spyware-sebastian-kurz

@israel @eu

hey all, i still didnt get enough money last week, i really need donations desperately, please donate, i need the help to afford food and other things please, i live in an abusive and transphobic home and need donations to live, please donate to my monero address to help me afford HRT. Please help me.

current goals:

immediate necessary expenses: 35$/250$

prescription glasses: 0$/250$

payment information:

cashapp: https://cash.app/vparagon

gofundme: https://gofund.me/034cef1a

cashapp referral (i make 5$): https://cash.app/app/QPL1BJF

monero address: 8576pqM8cmNW92eogjqnYzEewZbmwUbY61xRcGmbVCFphchaXKyAad1Xj9oNrYWQNqZkcm2kCHEzea4Y5Wd3DMUW4DozSV2

@mutualaid @disability @trans @vegan

hey all, i still didnt get enough money last week, i really need donations desperately, please donate, i need the help to afford food and other things please, i live in an abusive and transphobic home and need donations to live, please donate to my monero address to help me afford HRT. Please help me.

current goals:

immediate necessary expenses: 35$/250$

prescription glasses: 0$/250$

payment information:

cashapp: https://cash.app/vparagon

gofundme: https://gofund.me/034cef1a

cashapp referral (i make 5$): https://cash.app/app/QPL1BJF

monero address: 8576pqM8cmNW92eogjqnYzEewZbmwUbY61xRcGmbVCFphchaXKyAad1Xj9oNrYWQNqZkcm2kCHEzea4Y5Wd3DMUW4DozSV2

@mutualaid @disability @trans @vegan

Court document reveals locations of #WhatsApp victims targeted by #NSO #spyware

https://techcrunch.com/2025/04/09/court-document-reveals-locations-of-whatsapp-victims-targeted-by-nso-spyware/

"A coalition of governments has published a list of legitimate-looking Android apps that were actually spyware and were used to target civil society that may oppose China’s state interests.

On Tuesday, the U.K.’s National Cyber Security Centre, or NCSC, which is part of intelligence agency GCHQ, along with government agencies from Australia, Canada, Germany, New Zealand, and the United States, published separate advisories on two families of spyware, known as BadBazaar and Moonshine.

These two spywares hid inside legitimate-looking Android apps, acting essentially as “Trojan” malware, with surveillance capabilities such as the ability to access the phone’s cameras, microphone, chats, photos, and location data, the NCSC wrote in a press release on Wednesday.

BadBazaar and Moonshine, which have been previously analyzed by cybersecurity firms like Lookout, Trend Micro, and Volexity, as well as the digital rights nonprofit Citizen Lab, were used to target Uyghurs, Tibetans, and Taiwanese communities, as well as civil society groups, according to the NCSC.

Uyghurs are a Muslim-minority group largely in China that has for years faced detention, surveillance, and discrimination from the Chinese government, and thus has frequently been the target of hacking campaigns."

https://techcrunch.com/2025/04/09/governments-identify-dozens-of-android-apps-bundled-with-spyware/

"Chinese officials acknowledged in a secret December meeting that Beijing was behind a widespread series of alarming cyberattacks on U.S. infrastructure, according to people familiar with the matter, underscoring how hostilities between the two superpowers are continuing to escalate.

The Chinese delegation linked years of intrusions into computer networks at U.S. ports, water utilities, airports and other targets, to increasing U.S. policy support for Taiwan, the people, who declined to be named, said.

The first-of-its-kind signal at a Geneva summit with the outgoing Biden administration startled American officials used to hearing their Chinese counterparts blame the campaign, which security researchers have dubbed Volt Typhoon, on a criminal outfit, or accuse the U.S. of having an overactive imagination."

https://www.wsj.com/politics/national-security/in-secret-meeting-china-acknowledged-role-in-u-s-infrastructure-hacks-c5ab37cb

"Now, an exhibit published in the court document shows exactly in what countries 1,223 specific victims were located when they were targeted with NSO Group’s Pegasus spyware.

The country breakdown is a rare insight into which NSO Group customers may be more active, and where their victims and targets are located.

The countries with the most victims of this campaign are Mexico, with 456 individuals; India, with 100; Bahrain with 82; Morocco, with 69; Pakistan, with 58; Indonesia, with 54; and Israel, with 51, according to a chart titled “Victim Country Count,” that WhatsApp submitted as part of the case.

There are also victims in Western countries like Spain (21 victims), the Netherlands (11), Hungary (8), France (7), United Kingdom (2), and one victim in the United States."

https://techcrunch.com/2025/04/09/court-document-reveals-locations-of-whatsapp-victims-targeted-by-nso-spyware/

hey all, i still didnt get enough money last week, i really need donations desperately, please donate, i need the help to afford food and other things please, i live in an abusive and transphobic home and need donations to live, please donate to my monero address to help me afford HRT. Please help me.

current goals:

immediate necessary expenses: 35$/250$

prescription glasses: 0$/250$

payment information:

cashapp: https://cash.app/vparagon

gofundme: https://gofund.me/034cef1a

cashapp referral (i make 5$): https://cash.app/app/QPL1BJF

monero address: 8576pqM8cmNW92eogjqnYzEewZbmwUbY61xRcGmbVCFphchaXKyAad1Xj9oNrYWQNqZkcm2kCHEzea4Y5Wd3DMUW4DozSV2

@mutualaid @disability @trans @vegan

Scrolls volume eleven has been published! Get scrollin' for the usual #indieweb, #fediverse and #infosec / #cybersecurity goodness!

https://shellsharks.com/scrolls/scroll/2025-04-11

Thanks as usual to everyone who helped me make this week's edition as fun and interesting as the rest of them have been!

@andrewstiefel @Kalabasa @soatok @thisismissem @nivenly @NorcalGma2 @soatok @zyzzyxdonta @tobi @raelzero @jollyorc @booters @ireneista @rysiek @giovan @blogroll @EmilyMoranBarwick @chrishannah @Jayhoffmann @theresmiling @abosio @jsjoshua @Em0nM4stodon @SuperDicq @nathanu @davew @nazhamid @benji @kedara @plunch @adam @notnite @joel @TheIdOfAlan

blog! “FobCam '25 - All my MFA tokens on one page”

Some ideas are timeless. Back in 2004, an anonymous genius set up "FobCam". Tired of having to carry around an RSA SecurID token everywhere, our hero simply left the fob at home with an early webcam pointing at it. And then left the page open for all to see.

Security expert Bruce…

Read more: https://shkspr.mobi/blog/2025/04/fobcam-25-all-my-mfa-tokens-on-one-page/
⸻
#2fa #CyberSecurity #MFA #Satire(Probably) #security

You weren’t hacked. You just said “yes” to the terms and conditions.

hey all, i still didnt get enough money last week, i really need donations desperately, please donate, i need the help to afford food and other things please, i live in an abusive and transphobic home and need donations to live, please donate to my monero address to help me afford HRT. Please help me.

current goals:

immediate necessary expenses: 35$/250$

prescription glasses: 0$/250$

payment information:

cashapp: https://cash.app/vparagon

gofundme: https://gofund.me/034cef1a

cashapp referral (i make 5$): https://cash.app/app/QPL1BJF

monero address: 8576pqM8cmNW92eogjqnYzEewZbmwUbY61xRcGmbVCFphchaXKyAad1Xj9oNrYWQNqZkcm2kCHEzea4Y5Wd3DMUW4DozSV2

@mutualaid @disability @trans @vegan