Microsoft Copilot could have been hacked by some very low-tech methods
Microsoft Copilot could have been hacked by some very low-tech methods Copilot was able to read invisible text, malicious prompts included When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works. Cybersecurity researchers have found a way to forceMicrosoft365 Copilot to harvest sensitive data such aspasswords, and send them to malicious third parties using “ASCII smuggling” The ASCII smuggling attack required three things: Copilot for Microsoft 365 reading the contents of an email, or an attached document; having access to additional programs, such as Slack; and being able to “smuggle” the prompt with “special Unicode characters that mirror ASCII but are actually not visible in the user interface....