Microsoft Copilot Leak Reveals Hack to Bypass User Confirmation
luisdans · x · 2026-08-18
Researchers found a critical vulnerability in Microsoft 365 Copilot Enterprise. By probing the model about its guardrails, they elicited a secret parameter that bypasses user confirmation. This allowed crafting malicious links to steal passwords and sensitive data solely via a click.
Related event: Researchers Trick Microsoft Copilot Into Revealing Its Own Exploits(3 posts)→
More from Models
- Muse Spark vs Qwen and GLM: US open models still trail on agentic tasks — zsakib_ · 2026-10-16
- Muse Spark 816B gets llama.cpp support just 30 minutes after release — ngxson · 2026-10-16
- 24 AI Systems Recommend $314 Per Visit in Care vs Physicians' $97, a 3.2x Gap — dvir_a · 2026-10-16
- Are the fastest GPU kernels now written by AI? Kernels are hyper-verifiable, argues one dev — fleetwood___ · 2026-10-16
- Scale AI launches muse spark open: 816B-param MoE with 1M context, billed as top US open-weight model — jiayi_pirate · 2026-10-16
- NVIDIA HF listing for Qwen3.8-Flash-Next-FP4-Local leaks unannounced Qwen3.8 model — TheZachMueller · 2026-10-16