Tag: 数据泄露 (2 articles)

Lockdown Mode uses deterministic rules to block outbound requests, cutting off the data exfiltration vector in prompt injection attacks and implicitly revealing the weakness of default ChatGPT security.

A critical security flaw in Microsoft Copilot Cowork allowed attackers to exfiltrate user files via prompt injection by exploiting auto-sent emails and pre-authenticated download links.