Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

YearlyMonthly

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

Prompt Injection

Security incidents tagged Prompt Injection. Newest first.

1 Prompt Injection incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
1
Patched
0
Days without an incident
0
Longest quiet run: 44 days (Jul 28–Sep 9)
All tags →
  • HighPartly patched

    EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched

    Forever Security published research on Oct 29 2026, which it calls EMBRACE, showing that the browsers built into five AI coding assistants let a web page or a local file reach the computer behind them. In Cursor a booby-trapped page got the agent to run a command on the host with a single Enter (fixed Oct 1). In GitHub Copilot a page could spoof the address bar to show github.com to both the user and the agent (fixed in Copilot 1.1.29). In Codex, VS Code and Claude Desktop a single local HTML file opened in the built-in browser could read and exfiltrate any file on the disk, such as SSH keys, .env files and npm tokens. Codex and VS Code had no fix at publication: Microsoft declined the report citing Workspace Trust, and OpenAI never replied.

    Embedded browsers in AI coding assistants (Cursor, GitHub Copilot, OpenAI Codex, VS Code, Claude Desktop)Since Oct 29, 2026

Sponsored

Buy sponsor slot