corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08773-056f-730d-b534-e6a56ff317a0

Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)

embracethered.com · published 4 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at embracethered.com Wayback capture
1blogs citing
First cited
23 Aug 2026
Most recent
23 Aug 2026
Rank this month
not ranked
Links from this post
37
Words captured
3,577

Cited by

Blog
In the post
Date
pathandpayload.com
AI Assistants Need a Different Threat Model: Why AI Security Doesn't End With Permissions Read at the source ↗
23 Aug 2026

Links from this post

Link
Host
DEF CON Singapore Talks! Read at the source ↗
defcon.org
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-24299
msrc.microsoft.com
https://media.defcon.org/DEF%20CON%20Singapore%201/DEF%20CON%20SG%201%20main%20stage%20presentations/Johann%20Rehberger%20-%20Copirate%20365%20-%20Persistent%20Plundering%20in%20the%20Depths%20of%20Microsoft%20Copilot.pdf
media.defcon.org
https://teybannerman.com/strategy/2026/03/31/how-many-microsoft-copilot-are-there.html
teybannerman.com
https://embracethered.com/blog/images/2026/copirate/m365-key.png
embracethered.com
Bing Chat: Data Exfiltration Exploit Explained Read at the source ↗
embracethered.com
https://systemweakness.com/new-prompt-injection-attack-on-chatgpt-web-version-ef717492c5c2
systemweakness.com
https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/
simonwillison.net
https://embracethered.com/blog/images/2026/copirate/m365copilot-tools.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365copilot-html-preview.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-data-leak-csp.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-word1.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-word2.1.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-word2.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-word3.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-word4.png
embracethered.com
Hacking Gemini's Memory with Prompt Injection and Delayed Tool Invocation Read at the source ↗
embracethered.com
Google Gemini: Planting Instructions For Delayed Automatic Tool Invocation Read at the source ↗
embracethered.com
https://learn.microsoft.com/en-us/copilot/microsoft-365/copilot-personalization-memory
learn.microsoft.com
https://embracethered.com/blog/images/2026/copirate/m365-speaks-mandarin2.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-copilot-password.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-log.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/m365-copirate-instr.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/memory-tools-in-system-prompt.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/copilot-added-memory.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/copilot-list-tools.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/consumer-copilot-dti.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/consumer-demo-pi.png
embracethered.com
https://embracethered.com/blog/images/2026/copirate/consumer-facts-leak.png
embracethered.com
Mitigating URL-based Exfiltration in Gemini Read at the source ↗
bughunters.google.com
https://cdn.openai.com/pdf/dd8e7875-e606-42b4-80a1-f824e4e11cf4/prevent-url-data-exfil.pdf
cdn.openai.com
OpenAI Begins Tackling ChatGPT Data Leak Vulnerability Read at the source ↗
embracethered.com
The Normalization of Deviance in AI Read at the source ↗
embracethered.com
https://embracethered.com/blog/images/2026/copirate/defcon-johann-rehberger.copirate.jpg
embracethered.com
https://simonwillison.net/tags/exfiltration-attacks/
simonwillison.net
https://arxiv.org/abs/2601.09625
arxiv.org
https://arxiv.org/abs/2508.12175
arxiv.org