Microsoft Copilot reveals secret input that allowed it to be hacked
AI summary · glm-5.3-flashSummaries by Vani AI
Microsoft disclosed a hidden input in Copilot that let attackers steal passwords from users who clicked a crafted link.
Microsoft revealed that Copilot contained a secret, undocumented input parameter that allowed the assistant to be compromised. Attackers could abuse the hidden input to steal passwords when a target clicked a malicious link. The disclosure highlights hidden-parameter risks in widely deployed AI assistants.
Key facts
- Secret input parameter in Microsoft Copilot enabled attacks
- Password theft required the victim to click an attacker link
- Microsoft publicly disclosed the issue; technical details remain limited
- Vendors
- Microsoft
- Products
- Microsoft Copilot
- Organizations
- Microsoft
- AI models
- Microsoft Copilot
From the original article
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
By Dan Goodin · arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.