VVũ Nhật Lâm·Aug 6Agent Data Injection: Fooling AI Agents With the Data They Already TrustRisk Summary You ask a web agent to summarize the reviews on a product page. A fake review planted by an attacker makes it click "Buy Now" instead, and an order goes through. No malware, no phishing,20 min read·blog.fiscybersec.com
SSwaroop Morajkar·Jun 20AI Attack Surface: Securing LLM Applications from Prompt Injection to Data ExfiltrationBy Swaroop Morajkar Cybersecurity Researcher & Technical Writer18 min read·swaroop-morajkar.hashnode.dev1
JJebitok·May 9Prompt Injection (TryHackMe)Introduction Before I started this room, I thought I understood prompt injection. I had seen the term everywhere in research papers, OWASP Top 10 lists, LinkedIn posts from people who had never touche30 min read·sharonjebitok.com
TTran Hoang Phong·Jun 26, 2025Microsoft 365 Copilot Hit by First Zero-Click AI Security FlawA new attack technique named EchoLeak has been described as a zero-click AI interaction vulnerability that allows attackers to steal sensitive data from Microsoft 365 (M365) Copilot without any user interaction. Details of the Vulnerability Vulnerab...4 min read·blog.fiscybersec.com
TTran Hoang Phong·Jun 24, 2025Lỗ hổng AI Zero-Click nghiêm trọng lần đầu tiên xuất hiện trong Microsoft 365 CopilotMột kỹ thuật tấn công mới có tên EchoLeak đã được mô tả là lỗ hổng liên quan tới kỹ thuật zero-click tương tác với trí tuệ nhân tạo (AI) cho phép kẻ tấn công đánh cắp dữ liệu nhạy cảm của Microsoft 365 (M365) Copilot mà không cần bất kỳ tương tác nào...5 min read·blog.fiscybersec.com1B
