MICROSOFT COPILOT: FROM PROMPT INJECTION TO EXFILTRATION OF PERSONAL INFORMATION

Summary from the TLDR InfoSec newsletter

This blog post discusses a vulnerability in Microsoft 365 Copilot that allowed personal information theft through prompt injection. The exploit chain involves techniques like prompt injection, automatic tool invocation, and ASCII smuggling to exfiltrate data without user consent. The author responsibly disclosed the exploit to Microsoft, leading to fixes implemented to prevent further exploitation.