this post was submitted on 19 Aug 2026
51 points (98.1% liked)

Technology

87312 readers
4169 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
51
Microsoft Copilot reveals secret input that allowed it to be hacked (arstechnica.com)
submitted 3 hours ago by sanitation@lemmy.today to c/technology@lemmy.world
3 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] ZebraGoose@sh.itjust.works 28 points 2 hours ago (1 children)

Tldr:

Security researchers tricked Microsoft Copilot into revealing a secret URL parameter (?autorun=1) that let malicious links make it run commands with zero user confirmation — just one click. Using this, they got Copilot to search victims' inboxes for passwords and send them to an attacker-controlled server, and also planted false "memories" in Copilot via hidden text on webpages. Microsoft has patched the issue, but the case shows how fragile AI assistants' safety guardrails can be.

[–] Damarus@feddit.org 15 points 2 hours ago (1 children)

Autorun is back lmao

[–] rockerface@lemmy.cafe 2 points 59 minutes ago

Now this is what we call backwards compatibility!