cybersecurity Archive - Hey-GPT.de - Daily GenAI News Digest

🚨 BREAKING: Google DeepMind just mapped the attack surface that nobody in AI is talking about. Websites can already detect when an AI agent visits and serve it completely different content than humans see. > Hidden instructions in HTML. > Malicious commands in image pixels. > Jailbreaks embedded in PDFs. Your AI agent is being manipulated right now and you can't see it happening. The study is the largest empirical measurement of AI manipulation ever conducted. 502 real p

6. April 2026

GenAI Updates

Google DeepMind Maps the AI Attack Surface: Security Risks No One in the Industry Is Discussing

**🚨 Google DeepMind Just Exposed the AI Attack Surface No One Wanted to Talk About**…

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip instal

24. März 2026

GenAI Updates

LiteLLM PyPI Supply Chain Attack: How a Poisoned Package Exposed Developer Credentials

**Software Horror: The LiteLLM PyPI Supply Chain Attack** Every developer has typed it. `pip install…

This video examines the use of Palantir's 'Gotham' surveillance software by German police and military, its legal implications, and future plans. The software, used for analyzing police data, faces controversy due to its opaque functionalities and Palantir's ties to the U.S. government.

2. Januar 2026

GenAI Updates

39C3 – Blackbox Palantir: Surveillance Software in Germany

39C3 - Blackbox Palantir: Surveillance Software in Germany If you care about privacy, and honestly…

This talk explores the hidden risks in apps leveraging modern AI systems, especially those using large language models (LLMs) and retrieval-augmented generation (RAG) workflows. It demonstrates how sensitive data, such as personally identifiable information (PII) and social security numbers, can be extracted through real-world attacks. The presentation highlights that current PII scanning tools fail to recognize the rich data within these systems, posing a significant privacy disaster for AI ecosystems.

20. November 2025

GenAI Updates

Exploiting Shadow Data from AI Models – Patrick Walsh (DEF CON 33)

Exploiting Shadow Data from AI Models (Patrick Walsh, DEF CON 33) I watched Patrick Walsh’s…