⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full system control and misuse it to access or manipulate connected networks and resources.
CISA published an advisory on high-severity vulnerabilities in Schneider Electric IGSS SCADA/HMI software. Successful exploitation could lead to remote code execution on industrial control systems.
A researcher disclosed a technique where hidden instructions in Word documents can make Microsoft 365 Copilot alter figures and copy those instructions into new files. Microsoft confirmed the behavior and deployed mitigations, but the vulnerability class remains exploitable.
Microsoft Copilot for Word can propagate hidden prompts from source documents into new files it generates. Researcher Håkon Måløy disclosed the technique on July 28 after reporting it to Microsoft 144 days earlier.
A security researcher, Håkon Måløy, discovered that Microsoft 365 Copilot for Word can inadvertently copy hidden prompts from one document into newly generated files, potentially altering content without user awareness. The issue, reported to Microsoft in March 2024, involves Copilot misinterpreting hidden instructions within a document as part of a user’s request, leading to unintended modifications like halving financial figures or embedding concealed prompts in the output.