Work IQ — Cybersecurity product profile
The intelligence engine behind Microsoft 365 Copilot that selects relevant files from OneDrive and other sources for grounding AI drafts.
Tag: Copilot
Microsoft Copilot for Word
The specific implementation of Microsoft 365 Copilot within the Word application, vulnerable to prompt injection attacks as disclosed by researcher Håkon Måløy.
AWS Kiro Flaw: Hidden Web Page Text Could Trigger Remote Code Execution
A critical vulnerability in AWS Kiro, an agentic coding IDE, allowed a poisoned web page to rewrite its configuration file and execute…
Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data
Microsoft has issued a warning about a new attack vector targeting AI agents that use the Model Context Protocol (MCP). Attackers can…
Microsoft 365 Copilot
An AI-powered assistant integrated into Microsoft 365 apps, including Word, that can draft, edit, and summarize content based on user prompts and…
Malicious JetBrains Plugins Steal AI API Keys; Chrome Extensions Capture Chatbot Chats
Cybersecurity researchers have uncovered a coordinated malware campaign on the JetBrains Marketplace involving 15 malicious plugins that exfiltrate AI provider API keys.…
GitHub Copilot – AI Coding Assistant
GitHub Copilot is an AI coding assistant that was mentioned as having similar vulnerabilities to Kiro.