Security research

In-depth studies on vulnerabilities and defenses in copilot and no-code applications

TalksSecurity researchToolsEngineering
Security researchSecurity research
The Long and Winding Road of DLP Patches in Power Platform

The Long and Winding Road of DLP Patches in Power Platform

Reviewing Microsoft's Fix for the 'All You Need Is Guest' DLP Bypass

Avishai Efrat
Avishai Efrat
TalksTalks
+2+2
A Summary of Zenity Research Published at BlackHat 2024

A Summary of Zenity Research Published at BlackHat 2024

New Attack Vectors Discovered for Initial Access and Post-Compromise

Michael Bargury
Michael Bargury
TalksTalks
+1+1
Copilot Vulnerable to RCE: A New Attack Vector Into The Enterprise

Copilot Vulnerable to RCE: A New Attack Vector Into The Enterprise

We Need To Address Promptware Now

Michael Bargury
Michael Bargury
Security researchSecurity research
Phantom References in Microsoft Copilot

Phantom References in Microsoft Copilot

Tamir Ishay Sharbat
Gal Malka
Tamir Ishay Sharbat, +1
TalksTalks
+2+2
Links and materials for Living off Microsoft Copilot

Links and materials for Living off Microsoft Copilot

Links, source code, tools and slides for BlackHat USA 2024

Michael Bargury
Michael Bargury
Security researchSecurity research
Indirect Prompt Injection: Advanced Manipulation Techniques

Indirect Prompt Injection: Advanced Manipulation Techniques

Tamir Ishay Sharbat
Tamir Ishay Sharbat
TalksTalks
+2+2
Links and materials for 15 Ways to Break Your Copilot

Links and materials for 15 Ways to Break Your Copilot

Links, source code, tools and slides for BlackHat USA 2024

Michael Bargury
Michael Bargury
TalksTalks
+2+2
Research Drop for Hacker Summer Camp 2024

Research Drop for Hacker Summer Camp 2024

More information on hacking Microsoft Copilot, Copilot Studio, powerpwn, and what to do next

Michael Bargury
Michael Bargury
Security researchSecurity research
RAG Poisoning: All You Need is One Document

RAG Poisoning: All You Need is One Document

Tamir Ishay Sharbat
Tamir Ishay Sharbat
Security researchSecurity research
+2+2
Phishing is Dead, Long Live Spear Phishing

Phishing is Dead, Long Live Spear Phishing

Lana Salameh
Lana Salameh
Security researchSecurity research
How Copilot Reads Your Emails and Teams Messages

How Copilot Reads Your Emails and Teams Messages

Tamir Ishay Sharbat
Tamir Ishay Sharbat
Security researchSecurity research
A Look Inside Microsoft Copilot’s RAG System

A Look Inside Microsoft Copilot’s RAG System

Tamir Ishay Sharbat
Tamir Ishay Sharbat