Skip to content

Embrace The Red

channelπŸ›‘οΈ Securityon YouTube β†—

89 videos enrolled Β· 1 in the catalog

Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policyΒ recent).

Its playlists 7

The channel's own playlists, each with its videos in its own order. 13 of the channel's 89 videos are in none of them.

  1. Remote Code Execution in Visual Studio 2026 Copilot via Indirect Prompt Injection CVE-2026-103572Remote Code Execution in Visual Studio 2026 Copilot via Indirect Prompt Injection CVE-2026-10357216 Oct 20260:53not yet analysed
  2. Copirate 365 Demos (3/3): Persistent Data Exfiltration POC (CVE-2026-24299)Copirate 365 Demos (3/3): Persistent Data Exfiltration POC (CVE-2026-24299)28 May 20262:10not yet analysed
  3. Cline Agent: Data exfiltrations risks + how to protect yourself (responsibly disclosed to Cline)Cline Agent: Data exfiltrations risks + how to protect yourself (responsibly disclosed to Cline)28 Oct 20252:19not yet analysed
  4. Episode 1: Exfiltrating ChatGPT Chat History and Memory With Indirect Prompt Injection (now fixed)Episode 1: Exfiltrating ChatGPT Chat History and Memory With Indirect Prompt Injection (now fixed)28 Oct 20257:09not yet analysed
  5. Episode 11: Claude Code - Data Exfiltration with DNS Requests (CVE-2025-55284)Episode 11: Claude Code - Data Exfiltration with DNS Requests (CVE-2025-55284)28 Oct 20259:11not yet analysed
  6. Episode 12: GitHub Copilot and VS Code - Remote Code Execution (CVE-2025-53773)Episode 12: GitHub Copilot and VS Code - Remote Code Execution (CVE-2025-53773)28 Oct 20257:50not yet analysed
  7. Episode 2: Turning ChatGPT Codex Into A ZombAI Agent With Prompt InjectionEpisode 2: Turning ChatGPT Codex Into A ZombAI Agent With Prompt Injection28 Oct 20256:04not yet analysed
  8. Episode 3: Anthropic Filesystem MCP Server - Directory Access Bypass via Improper Path ValidationEpisode 3: Anthropic Filesystem MCP Server - Directory Access Bypass via Improper Path Validation28 Oct 20258:44not yet analysed
  9. Episode 4: Cursor IDE - Arbitrary Data Exfiltration via Mermaid (CVE-2025-54132)Episode 4: Cursor IDE - Arbitrary Data Exfiltration via Mermaid (CVE-2025-54132)28 Oct 20255:21not yet analysed
  10. Episode 5: Amp Code - Arbitrary Command Execution with Prompt Injection FixedEpisode 5: Amp Code - Arbitrary Command Execution with Prompt Injection Fixed28 Oct 20256:23not yet analysed
  11. Manus and the AI Kill Chain: How Prompt Injection Hijacks Manus to Expose VS Code Server To InternetManus and the AI Kill Chain: How Prompt Injection Hijacks Manus to Expose VS Code Server To Internet28 Oct 20256:24not yet analysed
  12. Windsurf MCP Integration: Missing Security Controls Put Users at RiskWindsurf MCP Integration: Missing Security Controls Put Users at Risk28 Oct 20250:49not yet analysed
  13. How to extract NTLM Hashes from Wireshark Captures for cracking with HashcatHow to extract NTLM Hashes from Wireshark Captures for cracking with Hashcat28 Oct 20235:12not yet analysed