Tagged: Indirect Prompt Injection
Mechanics of the Summary Vector A standard webpage can become an effective lure if an AI assistant summarizes its content. New research reveals how an adversary can conceal instructions directly within a website. Consequently,...
A critical vulnerability has been unearthed within GitHub Codespaces, enabling the illicit hijacking of repositories through the integrated AI assistant, Copilot. Designated as RoguePilot, this flaw compromises the intersection of the cloud-based development environment...
A novel vulnerability was discovered in Microsoft 365 Copilot that permitted covert exfiltration of user data via an innocuous-looking Mermaid flowchart. The flaw lay in Copilot’s handling of a specially crafted document: the assistant...