Security News > 2024 > August > Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot
2024-08-27 06:09
Details have emerged about a now-patched vulnerability in Microsoft 365 Copilot that could enable the theft of sensitive user information using a technique called ASCII smuggling. "ASCII Smuggling is a novel technique that uses special Unicode characters that mirror ASCII but are actually not visible in the user interface," security researcher Johann Rehberger said. "This means that an attacker
News URL
https://thehackernews.com/2024/08/microsoft-fixes-ascii-smuggling-flaw.html
Related news
- Microsoft 365, Office users hit by wave of ‘30088-27’ update errors (source)
- June Windows Server updates break Microsoft 365 Defender features (source)
- Major Microsoft 365 outage caused by Azure configuration change (source)
- Microsoft confirms CrowdStrike update also hit Windows 365 PCs (source)
- Microsoft 365 users targeted by phishers abusing Microsoft Forms (source)
- Microsoft 365 and Azure outage takes down multiple services (source)
- Microsoft 365 anti-phishing feature can be bypassed with CSS (source)
- Microsoft 365 anti-phishing alert “erased” with one simple trick (source)
- Windows Server August updates fix Microsoft 365 Defender issue (source)
- Microsoft Edge PDF reader is getting more Copilot AI features (source)