Vulnerability

The $250,000 Bug That Exposes Cloud’s Dirty Secret

Google paid $250,000 for a Linux VM escape vulnerability—a crack in the foundation of cloud infrastructure. The bounty isn’t just a reward; it’s a market signal revealing how much we rely on the unpaid labor of open-source maintainers. This bug exposes a systemic risk: the code that separates your data from strangers is only as strong as the incentives to find its flaws.

Google’s AI Is Leaking Your Private YouTube Videos — and Nobody Is Fixing It

Google’s AI-powered comment summarizer can be tricked into leaking private YouTube videos — no hacking required. A simple prompt injection turns a user comment into a system command, exposing sensitive data. This isn’t a bug; it’s a fundamental design flaw that threatens every creator’s privacy. And Google isn’t fixing it.