Your copilot reads mail the attacker can write
Indirect prompt injection turned enterprise assistants into a new kind of confused deputy. The control that matters is what the assistant is allowed to touch.
ZeroDay Times Desk5 min read
Desk 04
AI & Tech
Copilots, model risk, and the security consequences of software that reads untrusted text.