A new class of attack called Agent Data Injection (ADI) has been disclosed by researchers from Seoul National University, the University of…
A new attack named MemGhost demonstrates how a single email can inject persistent false memories into AI personal assistants, manipulating their future…
A critical vulnerability in Microsoft 365 Copilot Enterprise Search, dubbed SearchLeak, could have allowed attackers to exfiltrate emails, files, and MFA codes…
EchoLeak is a prompt injection vulnerability in Microsoft 365 Copilot disclosed by Aim Security in June 2025. An attacker could craft an…
Aim Security is a cybersecurity company that disclosed the EchoLeak vulnerability (CVE-2025-32711) in Microsoft 365 Copilot in June 2025. The flaw allowed…