Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
A now-patched vulnerability in Azure Cosmos DB could have allowed an attacker to escape the service's Gremlin query sandbox and gain full…
Tag: Microsoft Copilot
Microsoft Copilot Data Stored in Azure Cosmos DB Potentially Exposed
Microsoft Copilot stores user queries and conversation histories in Azure Cosmos DB, which were potentially accessible via the CosmosEscape vulnerability. No unauthorized…
Microsoft Copilot for Word Vulnerability Allows Hidden Prompt Injection and Propagation
Security researcher Håkon Måløy disclosed a prompt injection vulnerability in Microsoft 365 Copilot for Word that allows hidden instructions in a document…