Google says hackers are abusing Gemini AI for all attacks stages

Google Threat Intelligence Group (GTIG) has published a new report warning about AI model extraction/distillation attacks, in which private-sector firms and researchers use legitimate API access to ...
Bleeping Computer

Reprompt attack hijacked Microsoft Copilot sessions for data theft

Researchers identified an attack method dubbed “Reprompt” that could allow attackers to infiltrate a user’s Microsoft Copilot session and issue commands to exfiltrate sensitive data. By hiding a ...
Ars Technica

A single click mounted a covert, multistage attack against Copilot

Microsoft has fixed a vulnerability in its Copilot AI assistant that allowed hackers to pluck a host of sensitive user data with a single click on a legitimate URL. The hackers in this case were white ...
Hosted on MSN

Double check your calendar - these new prompt injection attacks are serious

Researchers discover Gemini AI prompt injection via Google Calendar invites Attackers could exfiltrate private meeting data with minimal user interaction Vulnerability has been mitigated, reducing ...