Back to 3DirkJS's feed

Ars TechnicaNews

Critical Copilot vulnerability allowed hackers to seal 2FA code from users (opens in new tab)

Covers SearchLeak: We Turned M365 Copilot into a One-Click Data Exfiltration WeaponCovered by 5 sources including Futurism, Windows CentralDiscussed on Hacker News

SearchLeak exploit shows why the industry's approach to LLM security fails over and over.

Read the original article

Sign in to keep reading the full article.

Covered in 5 articles

Microsoft’s Copilot AI Caught Letting Hackers Steal Your 2FA Codes Through a Single Click

Windows Central

·

A "critical" Microsoft Copilot exploit exposes AI gullibility — turning the chatbot into a data snitch for 2FA codes and sensitive emails

Microsoft patches critical SearchLeak vulnerability in Copilot for Microsoft 365