Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://aus.social/users/Dangerous_beans/statuses/115058369495373453">Alex von Kitchen (dangerous_beans@aus.social)'s status on Wednesday, 20-Aug-2025 11:48:01 JST</a><a href="https://aus.social/@Dangerous_beans" title="dangerous_beans@aus.social"><img src="https://gnusocial.jp/avatar/91272-48-20250808060517.webp" width="48" height="48" alt="Alex von Kitchen" style="position: absolute; left: 0; top: 0;">Alex von Kitchen</a></section><article><p>"We deployed a complex black box system and gave it permissions to interact with everything, and now it's doing weird shit we don't know about"</p><p>:blobcatfacepalm: </p><p><a href="https://cyberplace.social/@GossiTheDog/115057935147177115" rel="nofollow">https://cyberplace.social/@GossiTheDog/115057935147177115</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5517298#notice-10832832">In conversation</a><time datetime="2025-08-20T11:48:01+09:00" title="Wednesday, 20-Aug-2025 11:48:01 JST">about 3 months ago</time> <span>from <span><a href="https://aus.social/@Dangerous_beans/115058369495373453" rel="external" title="Sent from aus.social via ActivityPub">aus.social</a></span></span><a href="https://aus.social/@Dangerous_beans/115058369495373453">permalink</a><h4>Attachments</h4><ol><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://cyberplace.social/@GossiTheDog/115057935147177115">Kevin Beaumont (@GossiTheDog@cyberplace.social)</a></h5><div> from <span>Kevin Beaumont</span></div></header><div>Microsoft have hidden a vulnerability in M365 Copilot from customers. Copilot allowed access to enterprise files without generating access logs, MS patched it but didn’t issue a CVE or tell anyone about it. https://pistachioapp.com/blog/copilot-broke-your-audit-log</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Alex von Kitchen (dangerous_beans@aus.social)'s status on Wednesday, 20-Aug-2025 11:48:01 JST Alex von Kitchen
"We deployed a complex black box system and gave it permissions to interact with everything, and now it's doing weird shit we don't know about"
:blobcatfacepalm:
https://cyberplace.social/@GossiTheDog/115057935147177115
In conversationabout 3 months ago from aus.socialpermalink
Attachments
1. No result found on File_thumbnail lookup.
  Kevin Beaumont (@GossiTheDog@cyberplace.social)
  from Kevin Beaumont
  Microsoft have hidden a vulnerability in M365 Copilot from customers. Copilot allowed access to enterprise files without generating access logs, MS patched it but didn’t issue a CVE or tell anyone about it. https://pistachioapp.com/blog/copilot-broke-your-audit-log

Public

Embed Notice

HTML Code

Corresponding Notice