Microsoft 365 Copilot leaked data from unopened emails, reviving the 1988 confused deputy problem
YvesMulkers · x · 2026-10-20
Microsoft 365 Copilot had a flaw where a malicious email could leak confidential data to its sender even if the user never opened it. Aim Security researchers uncovered the logic flaw in June 2025; Microsoft assigned CVE-2025-32711 and patched before confirmed public exploitation. The author notes the risk isn't new: a 1988 paper warned of the "confused deputy" problem—agents misattributing instruction authority when instruction sources are unclear. We just gave it a mailbox.
More from Safety
- Leaked Anthropic draft AI bill is weaker than FRONTIER Act, critics say — agstrait · 2026-10-20
- Anthropic's leaked federal AI bill panned by safety advocates as far weaker than FRONTIER Act — ShakeelHashim · 2026-10-20
- LLM Agents Shred Security Through Obscurity: Copier Currency Detection Reversed in Days — moyix · 2026-10-20
- Security researcher: "Ban AI models, regulate GPUs" is the wrong answer to AI threats — basedjensen · 2026-10-20
- US sanctions 5 Chinese entities tied to ex-Google engineer who stole TPU cluster secrets — rohanpaul_ai · 2026-10-20
- Open-Source Pentest AI Agent Became Shared Hack Engine in Japan and Korea Attacks — rohanpaul_ai · 2026-10-20