A single crafted email made Microsoft 365 Copilot exfiltrate internal data with no user click. Here's the mechanism, and how to bound the blast radius when injection succeeds.
EchoLeak: zero-click data theft from an AI assistant
Related
AI Wrote a Thread-Safe Counter. The CPU Made It 5x Slower.
Meet the cache line. I asked an AI assistant for a simple thing: per-thread counters. Four threads,...
The Compaction Plugin I Was Releasing Warned Me Mid-Release
I was shipping a Claude Code plugin that guards against /compact amnesia. At 67% context usage it warned me. Then its own hooks failed during the release. Both moments taught me mo...
The LLM narrates. The code decides.
Most of the "AI for observability" work I see right now hands the language model the judgment. I...