EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
1–10 of 100 posts
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#2Microsoft has published a CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#3Amazing
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#4it uses all the jargon from real security (spraying, scope violation, bypass) but when reading these, it always sounds simple like essentially prompt injection, rather than some highly crafted shell code and unsafe memory exploitation
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#5this seems to be an inherent flaw of the current generation of LLMs as there's no real separation of user input.
you can't "sanitize" content before placing it in context and from there prompt injection is almost always possible, regardless of what else is in the instructions
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#6it uses all the jargon from real security (spraying, scope violation, bypass) but when reading these, it always sounds simple like essentially prompt injection, rather than some highly crafted shell code and unsafe memory exploitation
[deleted]
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#7Microsoft has published a CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
the classification seems very high (9.3). looks like they've said User Interaction is none, but from reading the writeup looks like you would need the image injected into a response prompted by a user?
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#8[flagged]
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#9[flagged]
[deleted]
Re: EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
#10[deleted]