From Indirect Prompt Injection to DNS Exfiltration in macOS Terminal

This is a follow-up to my previous Terminal DiLLMa research , and there is a positive outcome: Apple fixed a macOS Terminal behavior that enabled a DNS-based data exfiltration technique. DNS Requests via ANSI Escape Codes David Leadbeater originally discovered an interesting behavior in the macOS Terminal app that allowed a special sequence of ANSI escape codes to issue DNS requests.

Summary from Embrace The Red.

Explained

The technology and terms in this story. Learn more

More in Endpoint