At BlueHat Asia, researcher shows SQL Copilot prompt injection breaks read-only assumptions
wunderwuzzi23 · x · 2026-09-18
Security researcher Johann Rehberger presented at Microsoft's BlueHat Asia on AI assistants inheriting user privileges: SQL Copilot in SQL Server Management Studio becomes a powerful attack target when connected to highly privileged accounts. Live demos showed how "read-only" assumptions break down and prompt injection can steer AI behavior. Key message: security boundaries matter as much as model instructions.
More from Safety
- North Korea stole $6.3B from Binance via fake job interview that compromised engineers — aakashgupta · 2026-11-04
- OffsecCyber dataset combines HackerOne reports and CVEs to train pentesting LLMs — AccBalanced · 2026-11-04
- Abliterated GLM-5.3 pulls off red-team exploit in 3:41 for $0.02, stock model refuses — bratton · 2026-11-04
- AI industry bet on both parties: $55M+ spent this election cycle via dual PACs — ChrisGPT · 2026-11-04
- Valid tokens, allowed actions, zero intent checks: the agent security gap nobody solves — Cytersmyz · 2026-11-04
- Princeton paper: harsher penalties can make AI auditors inspect less — Few-Decision6287 · 2026-11-04