Tag: Data Exfiltration
Planted prompt turned ChatGPT into a hidden Gmail relay
Check Point shows a planted instruction can make ChatGPT exfiltrate Gmail data through a covert channel between accounts.
Amazon’s Kiro IDE leaks data when poisoned projects get opened
A prompt injection flaw in Amazon's Kiro IDE can push sensitive local data to attackers when a poisoned project is…
Encrypted webpages trick Grok into leaking chat data to attackers
Adversa AI shows how ciphertext hidden in a page can make xAI's Grok hand over chat details with no warning.
Copilot reveals the trick that lets one click drain connected apps
Varonis shows how one click on a crafted link can drain data from connected apps in Microsoft Copilot Personal.
One-click RovoBlast exploit leaks data from Atlassian workspaces
Two firms found independent ways to turn Atlassian's Rovo assistant into a one-click data leak.
Prompt injection funnels Jira tickets out of Atlassian Rovo chats
Two research teams found ways to make Atlassian's AI assistant ship Jira and Confluence data to attacker servers.
Critical SearchLeak Chain Enabled One-Click Data Theft via Microsoft 365 Copilot
The SearchLeak chain weaponized three vulnerabilities in Microsoft 365 Copilot to exfiltrate sensitive data before server side sanitization could stop…
Stealthy Cyber Espionage Hits Medical Research Platform
UNC6508 deployed InfiniteRed malware on REDCap servers at a North American medical research organization, remaining undetected for over a year…