2024-08-08 · 2024-Q3
LOLCopilot - Black Hat USA 2024 Copilot Attacks
Layer tags: not yet tagged.
Target
Microsoft 365 Copilot
Impact
Hidden email code injection, plugin exploitation, data exfiltration through default Copilot access; no user interaction required
Root Cause
Default configurations grant broad access to emails/docs; indirect prompt injection via invisible email tags