← Toutes les actualitésLire l'article ↗
Yesterday Håkon Måløy, a stinky AI security researcher, unveiled several vulnerabilities with Mic...
Synthèse
dr-ish is that if you insert carefully worded instructions, as white-text thus making it invisible to the user, at the end of Microsoft Office documents, Microsoft Copilot will follow the instructions given to it. The problem with this method (as is tradition), is that the text is still visible in the document if highlighted by the user. Hence, doing something as simple as CTRL+A would render the text visible to the user. Regardless, Håkon Måløy successfully appended white text to a Microsoft Office document that halved the values of company data presented in the document. In simple words, the appended white text manipulated company data in the Microsoft Word file. His second proof-of-concept demonstrated appended white texting propagating the appended white text to other Microsoft Office documents, thus making…
Yesterday Håkon Måløy, a stinky AI security researcher, unveiled several vulnerabilities with Microsoft Copilot which could hypothetically allow an AI-like worm in Microsoft Office documents. the tl;dr-ish is that if you insert carefully worded instructions, as white-text thus making it invisible to the user, at the end of Microsoft Office documents, Microsoft Copilot will follow the instructions given to it. The problem with this method (as is tradition), is that the text is still visible in the document if highlighted by the user. Hence, doing something as simple as CTRL+A would render the text visible to the user. Regardless, Håkon Måløy successfully appended white text to a Microsoft Office document that halved the values of company data presented in the document.
In simple words, the appended white text manipulated company data in the Microsoft Word file.
Source originale
t.me