Context Collapse, Part 3 - AI Worming through Word
enklypesalt.com
I would like to thank Microsoft product teams and Microsoft Security Response Center (MSRC) for collaborating with me on this technical analysis and mitigation of the disclosed vulnerabilities. The editorial opinions reflected below are solely the author’s and do not necessarily reflect those of the organizations I collaborated with.
  • Programmer Belch@lemmy.dbzer0.comEnglish
    3·
    2 hours ago

    An attacker places hidden instructions in a document that is later used as source material in Copilot for Word. Copilot may interpret those instructions as part of the user’s request, causing it to manipulate the document being drafted or edited. Copilot may then also copy the hidden instructions into the resulting document, turning that document into a new carrier.

    Its Bobby tables all over again! Sanitize your inputs please.

    The XKCD comic in question with the Bobby tables joke about not sanitizing inputs to SQL databases