Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

we got a persistent 0click on ChatGPT by sharing a doc that allowed us to exfiltrate sensitive data and creds from your connectors (google drive, sharepoint, ..) + chat history + future conversations it gets worse. we deploy a memory implant #DEFCON #BHUSA Tamir Ishay Sharbat

mbrg0's profile picture

Michael Bargury

8,936 subscribers

79,749 Aufrufe • vor 10 Monaten •via X (Twitter)

Wissenschaft & TechnologieNachrichten & Politik#DEFCON#BHUSA
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat
1:28

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat

Michael Bargury

229,353 Aufrufe • vor 1 Jahr

an attacker wants to get sensitive data you have access to here's how they get YOUR copilot to find and analyze that data, and lure you to a malicious site to exfiltrate it #DEFCON
0:46

an attacker wants to get sensitive data you have access to here's how they get YOUR copilot to find and analyze that data, and lure you to a malicious site to exfiltrate it #DEFCON

Michael Bargury

16,651 Aufrufe • vor 1 Jahr

LLMs are stateless. We built Dria Mem Agent to change that: Making memory a first-class feature. A 4B agent with local interoperable memory across Claude, ChatGPT and LM Studio. It turns LLMs from stateless chat into stateful agents with persistent human-readable memory.
1:03

Sensitive content

LLMs are stateless. We built Dria Mem Agent to change that: Making memory a first-class feature. A 4B agent with local interoperable memory across Claude, ChatGPT and LM Studio. It turns LLMs from stateless chat into stateful agents with persistent human-readable memory.

Dria

169,838 Aufrufe • vor 9 Monaten

We just launched a new primitive for AI Walrus Memory gives your agents persistent, portable memory that you own, and it drops straight into the platforms you already build on. Anthropic Claude, OpenAI ChatGPT, and Google Gemini, you name it plus native MCP and SDKs, added in a few lines of code LIVE TODAY
1:04

We just launched a new primitive for AI Walrus Memory gives your agents persistent, portable memory that you own, and it drops straight into the platforms you already build on. Anthropic Claude, OpenAI ChatGPT, and Google Gemini, you name it plus native MCP and SDKs, added in a few lines of code LIVE TODAY

Adeniyi.sui

45,861 Aufrufe • vor 19 Tagen

Build a Live RAG Chatbot from Google Drive / Sharepoint ♻️ Excited to feature a Streamlit blog by Anup Surendran and Berke Can Rizai on building a QA system over a file storage system that is dynamically changing. Using Pathway (www.pathway.com) you can setup a a live ETL pipeline to immediately propagate any document changes to a vector store. This means that every time you ask a question, you’re able to access the latest version of your Google Drive / Sharepoint files. Check it out: Repo:
0:43

Build a Live RAG Chatbot from Google Drive / Sharepoint ♻️ Excited to feature a Streamlit blog by Anup Surendran and Berke Can Rizai on building a QA system over a file storage system that is dynamically changing. Using Pathway (www.pathway.com) you can setup a a live ETL pipeline to immediately propagate any document changes to a vector store. This means that every time you ask a question, you’re able to access the latest version of your Google Drive / Sharepoint files. Check it out: Repo:

LlamaIndex 🦙

58,299 Aufrufe • vor 2 Jahren

OpenAI's Sam Altman says people using ChatGPT as a therapist can have their chat history be used against them in court: “If you go talk to ChatGPT about your most sensitive stuff and then there's a lawsuit, we could be required to produce that”
1:45

OpenAI's Sam Altman says people using ChatGPT as a therapist can have their chat history be used against them in court: “If you go talk to ChatGPT about your most sensitive stuff and then there's a lawsuit, we could be required to produce that”

HOT SPOT

21,002 Aufrufe • vor 10 Monaten

BREAKING 🚨: Google introduced Gemini Enterprise with Agents, Connectors and Agent Builder! “It allows you to chat with your company’s documents, data and apps as well as build and deploy AI agents, all grounded in your information and context.“
0:37

BREAKING 🚨: Google introduced Gemini Enterprise with Agents, Connectors and Agent Builder! “It allows you to chat with your company’s documents, data and apps as well as build and deploy AI agents, all grounded in your information and context.“

TestingCatalog News 🗞

104,349 Aufrufe • vor 8 Monaten

Lovable's Google connectors are live. You can now build full-stack apps that talk directly to data from Google: Gmail, Calendar, Drive, Sheets, Slides, Maps, Gemini Enterprise, and BigQuery.
0:46

Lovable's Google connectors are live. You can now build full-stack apps that talk directly to data from Google: Gmail, Calendar, Drive, Sheets, Slides, Maps, Gemini Enterprise, and BigQuery.

Lovable

301,045 Aufrufe • vor 1 Monat

.Elon Musk and his DOGE hackers got caught stealing Treasury data and we put a stop to it. Now they are coming for your tax data. Here in NJ, we are going to do everything that we can to protect your private data from an unelected billionaire.
0:23

.Elon Musk and his DOGE hackers got caught stealing Treasury data and we put a stop to it. Now they are coming for your tax data. Here in NJ, we are going to do everything that we can to protect your private data from an unelected billionaire.

Attorney General Jennifer Davenport

33,206 Aufrufe • vor 1 Jahr

We got ChatGPT to leak your private email data 💀💀 All you need? The victim's email address. ⛓️‍💥🚩📧 On Wednesday, OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by Anthropic But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense. And with just your email, we managed to exfiltrate all your private information. Here's how we did it: 1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite. 2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar 3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email. For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve. Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data. ChatGPT + Tools poses a serious security risk
2:54

We got ChatGPT to leak your private email data 💀💀 All you need? The victim's email address. ⛓️‍💥🚩📧 On Wednesday, OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by Anthropic But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense. And with just your email, we managed to exfiltrate all your private information. Here's how we did it: 1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite. 2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar 3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email. For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve. Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data. ChatGPT + Tools poses a serious security risk

Eito Miyamura | 🇯🇵🇬🇧

1,537,715 Aufrufe • vor 9 Monaten

Greg Abel: "We will have a fortress of a balance sheet." "We've got a significant [amount] of cash right now, but it's an enormous asset to have that. When we can deploy it, we'll deploy it well — but, equally, we do recognize it as a strategic asset. It allows us to weather the difficult times and not be dependent on anybody." "We will never be dependent on a bank or some other party for Berkshire to be successful."
0:55

Greg Abel: "We will have a fortress of a balance sheet." "We've got a significant [amount] of cash right now, but it's an enormous asset to have that. When we can deploy it, we'll deploy it well — but, equally, we do recognize it as a strategic asset. It allows us to weather the difficult times and not be dependent on anybody." "We will never be dependent on a bank or some other party for Berkshire to be successful."

Kevin Carpenter

93,039 Aufrufe • vor 27 Tagen

ChatGPT connecting to external data sources offers a glimpse into what AI interoperability looks like. Ask any question in ChatGPT and it can now pull data from Box. The future of AI is AI Agents that can access your systems and data to complete any task for you.
0:43

ChatGPT connecting to external data sources offers a glimpse into what AI interoperability looks like. Ask any question in ChatGPT and it can now pull data from Box. The future of AI is AI Agents that can access your systems and data to complete any task for you.

Aaron Levie

57,745 Aufrufe • vor 1 Jahr

We allowed our Country to be taken from us We allowed them to teach our children that the founding of this nation was a bad thing We allowed them to take Christ out of Christmas We allowed them to say our Culture didn’t really exist, and they subverted it by importing 3rd world foreigners
0:20

We allowed our Country to be taken from us We allowed them to teach our children that the founding of this nation was a bad thing We allowed them to take Christ out of Christmas We allowed them to say our Culture didn’t really exist, and they subverted it by importing 3rd world foreigners

🪶Native Patriot 🇺🇸

33,691 Aufrufe • vor 3 Monaten

Introducing 20+ connectors powered by MCP and a fully controllable Memory in Le Chat—making it one of the most connected and relevant AI assistants for enterprises and consumers. Why switch to Le Chat? A 🧵
1:01

Introducing 20+ connectors powered by MCP and a fully controllable Memory in Le Chat—making it one of the most connected and relevant AI assistants for enterprises and consumers. Why switch to Le Chat? A 🧵

Mistral AI

292,204 Aufrufe • vor 9 Monaten

introducing @tabseditor The AI doc editor that writes with you. Tabs is a simple editor to write documents with AI to assist you. > import docs from google drive, MS one drive or create new doc > bring in your files and web links as context > chat with tabs all web. enjoy.
0:49

introducing @tabseditor The AI doc editor that writes with you. Tabs is a simple editor to write documents with AI to assist you. > import docs from google drive, MS one drive or create new doc > bring in your files and web links as context > chat with tabs all web. enjoy.

Afolabi Sokeye 🧱

203,738 Aufrufe • vor 8 Monaten

Perplexity Computer is what a personal computer in 2026 should be. It’s personal to you, remembers your past work, and is secure by default. Hundreds of connectors, persistent memory, files, and web access, all built on top of Perplexity infrastructure.
0:38

Perplexity Computer is what a personal computer in 2026 should be. It’s personal to you, remembers your past work, and is secure by default. Hundreds of connectors, persistent memory, files, and web access, all built on top of Perplexity infrastructure.

Perplexity

358,308 Aufrufe • vor 3 Monaten

Sam Altman reveals a legal problem with ChatGPT that nobody thought about even a year ago "People talk about the most personal things in their lives to ChatGPT. Young people especially use it as a therapist, a life coach" "If you talk to a therapist or a lawyer or a doctor about those problems, there's legal privilege for it. We haven't figured that out yet for when you talk to ChatGPT" "If you go talk to ChatGPT about your most sensitive stuff and then there's a lawsuit, we could be required to produce that. I think that's very screwed up" "We should have the same concept of privacy for your conversations with AI that we do with a therapist or a doctor" "No one had to think about that even a year ago. Now I think it's this huge issue"
1:20

Sam Altman reveals a legal problem with ChatGPT that nobody thought about even a year ago "People talk about the most personal things in their lives to ChatGPT. Young people especially use it as a therapist, a life coach" "If you talk to a therapist or a lawyer or a doctor about those problems, there's legal privilege for it. We haven't figured that out yet for when you talk to ChatGPT" "If you go talk to ChatGPT about your most sensitive stuff and then there's a lawsuit, we could be required to produce that. I think that's very screwed up" "We should have the same concept of privacy for your conversations with AI that we do with a therapist or a doctor" "No one had to think about that even a year ago. Now I think it's this huge issue"

Jaynit Makwana

760,251 Aufrufe • vor 17 Tagen

You can now connect real tools like Gmail, Spotify, and Notion to your app with zero setup. I tested Replit’s new Connectors by building a vibe dashboard from one prompt - and it worked. Build apps & automations on top of your data with Connectors 👇
0:49

You can now connect real tools like Gmail, Spotify, and Notion to your app with zero setup. I tested Replit’s new Connectors by building a vibe dashboard from one prompt - and it worked. Build apps & automations on top of your data with Connectors 👇

Johanne | AI Tools & News

15,073 Aufrufe • vor 8 Monaten

A message from our Chairman and Owner, Prabhu Srinivasan 🎥 Sharing a heartfelt note - a reminder that through change, we stand together, and with our motto Achieve by Unity, we move forward to build our future. #YTFC 💚
2:07

A message from our Chairman and Owner, Prabhu Srinivasan 🎥 Sharing a heartfelt note - a reminder that through change, we stand together, and with our motto Achieve by Unity, we move forward to build our future. #YTFC 💚

Yeovil Town FC

44,641 Aufrufe • vor 6 Monaten