Sneaky Mermaid attack in Microsoft 365 Copilot steals data • The Register

updated Microsoft fixed a security hole in Microsoft 365 Copilot that allowed attackers to trick the AI assistant into stealing sensitive tenant data – like emails – via indirect prompt injection attacks.

But the researcher who found and…