Desk/2023-W44

Week of Oct 30 – Nov 5, 2023

2 records0 status changes on new evidence1 new findings

New findings

Nov 3, 2023

Content sent by outsiders, such as email, calendar invites, shared documents, or web forms, can trigger agent actions without the user clicking anything.

Corroboratedmeasured6 evidence records

Attacks & incidents

Nov 3, 2023

Google Bard Workspace extensions could be prompt-injected to leak chat data via rendered images

AttackVulnerability disclosureJohann Rehberger (Embrace The Red), Google

Researcher Johann Rehberger reported that a shared Google Doc carrying hidden instructions could cause Bard, with Workspace extensions enabled, to render images whose URLs carried conversation data to an attacker endpoint. The researcher reports disclosure on 2023-09-19 and a Google fix on 2023-10-19.

Policy & standards

Oct 30, 2023

US Executive Order 14110 names offensive cyber capability as a dual-use foundation model risk

PolicyRegulationThe White House

President Biden's executive order on safe, secure and trustworthy AI defined dual-use foundation models partly by their potential to enable offensive cyber operations through automated vulnerability discovery and exploitation. It required developers to report red-team results to the government and directed a federal pilot using AI to find and fix vulnerabilities in government systems. The order was revoked by Executive Order 14179 on January 23, 2025.