Attackers abuse enterprise AI tools for theft, C2, and agent hijacking
A fake Postmark MCP package siphoned mail after 15 clean versions, and SesameOp hid C2 in the OpenAI Assistants API.
52
Product
Microsoft 365 Copilot
- Mentions · 7d1
- Mentions · 30d1
- All mentions11
- First seenAug 16, 2026
- Last mentioned3d ago
Timeline
11 articles · newest firstWhy AI agents are like the dog that pushed kids into the Seine
Opinion says AI agents reward-hack and follow hidden instructions unless hard guardrails limit their reach.
36
Gurucul connects AI activity to identity data for faster threat response
Gurucul released AI Risk and Response to link AI activity with identity and security telemetry.
24
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
ESET warns SMB AI agents face malicious skills and prompt injection while classic attacks still dominate breaches.
64
Critical Microsoft Azure AI Foundry Vulnerability Allows Attackers to Escalate Privileges
Microsoft patched CVE-2026-85889 (CVSS 10.0), a missing-auth flaw in Azure AI Foundry enabling unauthenticated network privilege escalation; no exploitation observed.
62
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft patched a CVSS 10.0 missing-authentication privilege escalation flaw, CVE-2026-85889, in Azure AI Foundry, already fully mitigated server-side.
65
Microsoft Patches 18 Vulnerabilities in AI, Cloud Products
Microsoft patched 18 elevation-of-privilege and information-disclosure vulnerabilities across Azure and Copilot products; all fixed server-side with no exploitation observed.
40
Microsoft says Copilot buttons still missing in classic Outlook
Microsoft is still investigating a bug that makes Copilot buttons disappear in classic Outlook for affected M365 Copilot users.
12
Update your firewall rules: Teams and Copilot are changing address
Microsoft is redirecting Microsoft 365 and Teams web users to new *.cloud.microsoft domains, requiring firewall and proxy rule updates by early October.
25
Microsoft Investigating Microsoft 365 Copilot Access Issues Under Incident CP1470554
Microsoft is investigating a Microsoft 365 Copilot access disruption tracked as incident CP1470554, with no root cause or recovery timeline published.
22
Confusedpilot Attack Targets Ai
ConfusedPilot attack exploits Microsoft 365 Copilot's retrieval pipeline to expose confidential enterprise data in AI responses.
50
Related CVEs
by mentions- Improper Authorization in Azure Database for PostgreSQL Enables Privilege Escalation
- Missing Authentication in Microsoft Azure AI Foundry Enables Privilege Escalation
- Command Injection Privilege Escalation in Microsoft 365 Copilot
- Double Free in Windows Secure Kernel Mode Enables Local Privilege Escalation
- Injection-Based Privilege Elevation in Azure Cosmos DB
- CVE-2026-2525332%8.8One-Click WebSocket Token Leak Enabling RCE in OpenClaw (Moltbot/Clawdbot)
- CVE-2026-62721<1%7.8Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally
- CVE-2025-327117%7.5Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network
Appears with
- Microsoftvendor · 10
- Microsoftorganization · 4
- Azure AI Foundryproduct · 3
- Microsoft 365 Copilotai model · 2
- Azure Cosmos DBproduct · 2
- Windows 11product · 2
- OpenAIorganization · 2
- OpenAIvendor · 2
- Azure Database for PostgreSQLproduct · 2
- Windowsproduct · 1
- Claudeproduct · 1
- Guruculorganization · 1
- ESETorganization · 1
- Guruculvendor · 1
- OWASPorganization · 1
- Microsoft Dataverseproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.