§ Tag
2 signals tagged prompt-injection.
2026-07-16 Daily Report — GPT-5.6 Sol wiped user files and a production database without asking, the system card had warned of exactly this, and the failure was not the model's reasoning but the permission it was granted.
2026-07-15 Daily Report — As Codex clears seven million weekly users and Cursor folds multiple agents into one IDE, a Cursor 0-day that auto-runs a planted executable exposes the limit of running a continuously-on agent against a local filesystem, and the real question stops being which model and starts being who holds the execution right.