Threat intel digest: 23 June 2025 Artwork

The AI Security Podcast

I missed the boat in computer hacking so now I hack AI instead. This podcast discusses all things at the intersection of AI and security. Hosted by me (Harriet Farlow aka. HarrietHacks) and Tania Sadhani and supported by Mileva Security Labs.

Chat with Mileva Security Labs for your AI Security training and advisory needs: https://milevalabs.com/

Reach out to HarrietHacks if you want us to speak at your event: https://www.harriethacks.com/

All Episodes

The AI Security Podcast

Threat intel digest: 23 June 2025

June 25, 2025 • Harriet Farlow (HarrietHacks) • Season 1 • Episode 36

This week we discussed multiple AI vulnerabilities, including Echolink in M365 Copilot, Agent Smith in Langchain, and a SQL injection flaw in Llama Index, all of which have been patched. We also covered a data exposure bug in Asana's MCP server and OWASP's project to create an AI vulnerability scoring system, while also outlining Google's defense layers for Gemini, Thomas Roccia's Proximity tool for MCP server security, news regarding AI and legal/security concerns, and research on AI hacking AI, prompt compression, multi-agent security protocols, and the security of reasoning models versus LLMs.