NewsArs Technica — Security
Critical Copilot vulnerability allowed hackers to steal 2FA code from users
Teaser from the source
SearchLeak exploit shows why the industry's approach to LLM security fails over and over.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Ars Technica — SecurityMore on Copilot
Other advisories
- Highosv:MAL-2026-19177Malicious code in pentest-copilot (RubyGems)
- MediumCVE-2026-83953Microsoft GitHub Copilot Plugin for JetBrains IDEs: Befehlsinjektion
- MediumCVE-2026-83953Microsoft GitHub Copilot Plugin for JetBrains IDEs: Befehlsinjektion
- MediumCVE-2026-83953Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information l…
- MediumCVE-2026-83953GitHub Copilot for Jetbrains Information Disclosure Vulnerability
- MediumCVE-2026-89229Vivo BlueLM Copilot: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-89229Vivo BlueLM Copilot: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-89229Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows …
Other news entries
- Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwideNewsBleepingComputer
- Microsoft fixes classic Outlook bug that hid Copilot buttonsNewsBleepingComputer
- Encrypted instructions trick Copilot CLI into spilling developer secretsNewsCSO Online
- Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secretsNewsThe Register — Security
- Windows 11 KB5124010 update released with 46 changes and fixesNewsBleepingComputer
- A zero-click RCE flaw in AI coding agents could have exposed enterprise systemsNewsCSO Online
- Microsoft 365 Copilot: Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- Microsoft Apps (Authenticator und 365 Copilot): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
ID