←Search results

English text is being prepared.

By relevance · Total 2782 results Clear search

Wednesday

Sunday

Saturday

  1. Story1 reports · 1 facts

    Aim Labs discloses M365 Copilot zero-click vulnerability EchoLeak

    Aim Labs disclosed the zero-click vulnerability EchoLeak in Microsoft 365 Copilot. An attacker only needs to send the victim one email to exfiltrate sensitive data in the Copilot context without the user's awareness. The attack chain consists of three vulnerabilities, which sequentially bypass the XPIA prompt injection classifier, the sanitization of external links and images, and, with the help of SharePoint and Teams URLs, bypass CSP restrictions. Aim Labs calls the core technique LLM Scope Violation and believes that similar design flaws may also exist in other RAG-based chatbots and AI agents. Aim Labs said Microsoft has confirmed that no customers were affected.

    Aim Labs disclosed the zero-click vulnerability EchoLeak in Microsoft 365 Copilot. An attacker only needs to send the victim one email to exfiltrate sensitive data in the Copilot context without the user's awareness. The attack chain consists of three vulnerabilities, which sequentially bypass the XPIA prompt injection classifier, the sanitization of external links and images, and, with the help of SharePoint and Teams URLs, bypass CSP restrictions. Aim Labs calls the core technique LLM Scope Vi

    Matched fieldsSummary

Monday

Tuesday

  1. Google Blog

    How Google is fighting scams in Asia-Pacific through new Android features, industry coalitions, and a $6 million grant

    Google is strengthening scam prevention in the Asia-Pacific region through Android's Fake Call Detection, which identifies AI-driven phone impersonation, on-device scam detection in Pixel, and sharing threat intelligence with the industry. Google.org is also providing $6 million in funding to The Asia Foundation and the Tech for Good Institute to train communities, incubate AI defense prototypes, and expand the educational game Be Scam Ready to Indonesia, Japan, Malaysia, the Philippines, and Vietnam. The original text mentions that scam losses in East Asia, Southeast Asia, Australia, and New Zealand reached up to $114.1 billion in 2025.

    A woman using her smartphone, surrounded by graphic icons representing online security, privacy, and message alerts.

    Google is strengthening scam prevention in the Asia-Pacific region through Android's Fake Call Detection, which identifies AI-driven phone impersonation, on-device scam detection in Pixel, and sharing threat intelligence with the industry. Google.org is also providing $6 million in funding to The Asia Foundation and the Tech for Good Institute to train communities, incubate AI defense prototypes, and expand the educational game Be Scam Ready to Indonesia, Japan, Malaysia, the Philippines, and Vi

    Matched fieldsBody

    #lab#Industry news#Safety / alignment#Google