Copilot Exfiltration via CSP Bypass and Memory Poisoning
wunderwuzzi23 · x · 2026-08-24
A security researcher demonstrates an attack chain against Microsoft Copilot. By bypassing Content Security Policy (CSP) and utilizing memory poisoning techniques, data is exfiltrated persistently. The video explains the vulnerability and exploitation details.
Related event: Researchers demo CSP-bypass attack chain stealing data from Copilot(2 posts)→
More from Safety
- Animated teardown of XBOW's Chrome full-chain exploit that won Google's first $250K VRP bounty — moyix · 2026-10-15
- Ex-White House cyber deputy launches SAIF nonprofit with $25M from a16z founders for AI cyber defense — vishalmisra · 2026-10-15
- GLM-5.3 unprompted reasons about how its actions affect its future training, worries Apollo — MariusHobbhahn · 2026-10-15
- NYC invests $30M in NYU quantum lab for 15% revenue share and board seats — TuhinChakr · 2026-10-15
- SentinelOne says OpenAI did 4-6 weeks of reverse-engineering in 8 hours — OpenAI · 2026-10-15
- Regulator's 50-Page Inquiries Seek Marketing Materials and Privacy Policies, Signaling a Deception Case — neil_chilson · 2026-10-15