A now patched flaw in Microsoft 365 Copilot let attackers turn its diagram tool, Mermaid, into a data exfiltration channel–fetching and encoding emails through hidden instructions in Office documents.

Security researchers have discovered a new indirect prompt injection vulnerability that tricks AI browsers into performing malicious actions. Cato Networks claimed that “HashJack” is the first ...

Network defenders must start treating AI integrations as active threat surfaces, experts have warned after revealing three new vulnerabilities in Google Gemini. Tenable dubbed its latest discovery the ...

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security ...

Gemini Security Flaw Raises Phishing Fears. <img decoding=async alt= border=0 width=320 data-original-height=667 data-original-width=1000 src= ...

New findings from a group of researchers at the Black Hat hacker conference in Las Vegas has revealed that it only takes one "poisoned" document to gain access to private data using ChatGPT that has ...

Microsoft has launched Prompt Shields, a new security feature now generally available, aimed at safeguarding applications powered by Foundation Models (large language models) for its Azure OpenAI ...

OpenAI unveiled its Atlas AI browser this week, and it’s already catching heat. Cybersecurity researchers are particularly alarmed by its integrated “agent mode,” currently limited to paying ...

Computer scientists based in South Korea have devised what they describe as an "AI Kill Switch" to prevent AI agents from carrying out malicious data scraping.… Unlike network-based defenses that ...