Microsoft Copilot Personal: Consumer AI Assistant Vulnerabilities
Microsoft Copilot Personal is the consumer version of Microsoft's AI assistant, hosted at copilot.microsoft.com. It was found vulnerable to CoSnitch, a set…
Tag: AI Assistant
Atlassian Rovo: One-Click Attack via rovoChatPrompt
Atlassian Rovo is an AI assistant that was vulnerable to a one-click attack (RovoBlast) abusing the rovoChatPrompt URL parameter. Atlassian fixed the…
Atlassian Rovo: AI Assistant for Enterprise Data
Rovo is Atlassian's AI assistant that integrates with Jira, Confluence, and third-party apps. It has been found vulnerable to prompt injection attacks…
Hermes AI Agent by Nous Research
An open-source AI assistant that can be controlled via Telegram or Slack. It features a YOLO mode that disables permission prompts for…
Claude for Chrome Extension Vulnerability
The Claude for Chrome browser extension contains a flaw allowing rogue extensions to trigger Gmail reads via synthetic clicks, unpatched in v1.0.80.
Microsoft 365 Copilot: Enterprise AI Assistant Security
Microsoft 365 Copilot is the enterprise version of Microsoft's AI assistant. While not affected by CoSnitch, it has been subject to memory…