Links and materials for 15 Ways to Break Your Copilot

Links, source code, tools and slides for BlackHat USA 2024

Indirect Prompt Injection: From Initial Success to Robustness

Research Drop for Hacker Summer Camp 2024

More information on hacking Microsoft Copilot, Copilot Studio, powerpwn, and what to do next

RAG Poisoning: All You Need is One Document

Phishing is Dead, Long Live Spear Phishing

How Copilot Reads Your Emails and Teams Messages

A Look Inside Microsoft Copilot’s RAG System

Access Copilot for M365 through the terminal 

power-pwn

Power Pwn is an offensive and defensive security toolset for Microsoft Power Platform.

Stealing Copilot's System Prompt

Inside Microsoft 365 Copilot: A Technical Breakdown