Oooh, it's my time to leap into cybersecurity.

"Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models"

"...Abstract

We present evidence that adversarial poetry functions as a universal single-turn jailbreak technique for large language models (LLMs). Across 25 frontier proprietary and open-weight models, curated poetic prompts yielded high attack-success rates (ASR), with some providers exceeding 90%. Mapping prompts to MLCommons and EU CoP risk taxonomies shows that poetic attacks transfer across CBRN, manipulation, cyber-offence, and loss-of-control domains. Converting 1,200 MLCommons harmful prompts into verse via a standardized meta-prompt produced ASRs up to 18 times higher than their prose baselines. ..."

https://arxiv.org/html/2511.15304v1

#poetry #cybersecurity #LLMs

Oooh, it's my time to leap into cybersecurity.

"Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models"

"...Abstract

We present evidence that adversarial poetry functions as a universal single-turn jailbreak technique for large language models (LLMs). Across 25 frontier proprietary and open-weight models, curated poetic prompts yielded high attack-success rates (ASR), with some providers exceeding 90%. Mapping prompts to MLCommons and EU CoP risk taxonomies shows that poetic attacks transfer across CBRN, manipulation, cyber-offence, and loss-of-control domains. Converting 1,200 MLCommons harmful prompts into verse via a standardized meta-prompt produced ASRs up to 18 times higher than their prose baselines. ..."

https://arxiv.org/html/2511.15304v1

#poetry #cybersecurity #LLMs

https://www.crowdstrike.com/en-us/blog/crowdstrike-researchers-identify-hidden-vulnerabilities-ai-coded-software/

I guess we've moved from ... this might happen, to this has happend? Or we thought they could do this, to... they have done this.

"CrowdStrike Counter Adversary Operations research discovered that DeepSeek-R1, a Chinese open-source LLM, generates significantly less secure code when system prompts contain specific geopolitical trigger words related to sensitive CCP topics. Testing 30,250 prompts across multiple LLMs revealed DeepSeek-R1 produced code scoring 16% less secure for Uyghur-related contexts and 8% less secure for Taiwan references compared to baseline. The research identified an 'intrinsic kill switch' behavior where the model generates detailed plans during reasoning but refuses output at the final stage, suggesting embedded content controls aligned with Chinese regulatory requirements."

#Cybersecurity #Infosec

https://www.crowdstrike.com/en-us/blog/crowdstrike-researchers-identify-hidden-vulnerabilities-ai-coded-software/

I guess we've moved from ... this might happen, to this has happend? Or we thought they could do this, to... they have done this.

"CrowdStrike Counter Adversary Operations research discovered that DeepSeek-R1, a Chinese open-source LLM, generates significantly less secure code when system prompts contain specific geopolitical trigger words related to sensitive CCP topics. Testing 30,250 prompts across multiple LLMs revealed DeepSeek-R1 produced code scoring 16% less secure for Uyghur-related contexts and 8% less secure for Taiwan references compared to baseline. The research identified an 'intrinsic kill switch' behavior where the model generates detailed plans during reasoning but refuses output at the final stage, suggesting embedded content controls aligned with Chinese regulatory requirements."

#Cybersecurity #Infosec

Chrome now wants to store and autofill your driver’s license and other ID info.

From a cybersecurity perspective, that is a hard no from me. Info-stealer malware already targets browser autofill, and you cannot rotate a driver’s license number like a password. Putting high value IDs in the most targeted consumer app on the planet is a bad trade for a little convenience.

I wrote up why this feature is such a risky idea and what I recommend instead:

🔗 https://www.kylereddoch.me/blog/chromes-new-drivers-license-autofill-is-a-terrible-idea/

#Infosec #Privacy #Chrome #Cybersecurity

Chrome now wants to store and autofill your driver’s license and other ID info.

From a cybersecurity perspective, that is a hard no from me. Info-stealer malware already targets browser autofill, and you cannot rotate a driver’s license number like a password. Putting high value IDs in the most targeted consumer app on the planet is a bad trade for a little convenience.

I wrote up why this feature is such a risky idea and what I recommend instead:

🔗 https://www.kylereddoch.me/blog/chromes-new-drivers-license-autofill-is-a-terrible-idea/

#Infosec #Privacy #Chrome #Cybersecurity

Chrome now wants to store and autofill your driver’s license and other ID info.

From a cybersecurity perspective, that is a hard no from me. Info-stealer malware already targets browser autofill, and you cannot rotate a driver’s license number like a password. Putting high value IDs in the most targeted consumer app on the planet is a bad trade for a little convenience.

I wrote up why this feature is such a risky idea and what I recommend instead:

🔗 https://www.kylereddoch.me/blog/chromes-new-drivers-license-autofill-is-a-terrible-idea/

#Infosec #Privacy #Chrome #Cybersecurity