Microsoft 365 Copilot – Arbitrary Data Exfiltration via Mermaid Diagrams

Hacker NewsSunday, October 26, 2025 at 10:58:31 PM
NegativeTechnology
Recent reports have raised concerns about Microsoft 365 Copilot's potential for arbitrary data exfiltration through Mermaid diagrams. This issue is significant as it highlights vulnerabilities in widely used software, potentially exposing sensitive information to unauthorized access. As businesses increasingly rely on digital tools, ensuring data security is paramount, making this revelation particularly alarming for users and organizations alike.
— Curated by the World Pulse Now AI Editorial System

Was this article worth reading? Share it

Recommended Readings
I tested all of Edge's new AI browser features - and it felt like having a personal assistant
PositiveTechnology
Microsoft Edge has transformed into an AI-powered browser that offers features like shopping assistance, making it feel like having a personal assistant at your fingertips. This evolution is significant as it enhances user experience and productivity, showcasing how technology can simplify everyday tasks.
Microsoft CEO Satya Nadella gets a major pay rise - but will its increasing AI focus be enough to continue to pay the bills?
PositiveTechnology
Microsoft's CEO Satya Nadella has received a significant pay increase, reflecting the company's booming AI revenues. This growth highlights the potential of AI to drive future profits, but it also raises questions about income inequality within the company and whether this surge can be sustained. As Microsoft continues to invest heavily in AI, the implications of this financial strategy will be closely watched, making it a pivotal moment for the tech giant.
Payroll scam hits US universities as phishing wave tricks staff
NegativeTechnology
A recent wave of phishing attacks has targeted 25 universities in the U.S., with cybercriminals from the group Storm-2657 sending deceptive emails to around 6,000 staff members. This alarming trend aims to steal payroll credentials and redirect funds, posing a significant threat to the financial security of these institutions. It's crucial for universities to enhance their cybersecurity measures and educate staff about recognizing such scams to protect sensitive information.
Amazon strategised about keeping its datacentres’ full water use secret, leaked document shows
NegativeTechnology
A leaked internal document reveals that Amazon, the world's largest datacenter owner, has been strategizing on how to keep its water usage a secret. This is significant because it raises concerns about transparency and environmental responsibility, especially as water scarcity becomes a pressing global issue. The document indicates that Amazon's executives are aware of the potential backlash from disclosing the true extent of water consumption in their facilities, which could affect public perception and regulatory scrutiny.
I let Edge's Copilot Mode buy me a new space heater - here's how the AI browser did
PositiveTechnology
Microsoft Edge has transformed into an AI-powered browser that can assist with online shopping, and a recent test showcased its capabilities. The author allowed Edge's Copilot Mode to purchase a new space heater, demonstrating how AI can simplify the shopping experience. This development is significant as it highlights the growing integration of AI in everyday tasks, making technology more accessible and efficient for users.
Free Xbox Cloud Gaming With Ads Could Be an Alternative to Pricier Game Pass
PositiveTechnology
Microsoft is testing a free version of its cloud gaming service, which could provide an affordable alternative to the more expensive Game Pass. This move is significant as it opens up gaming access to a broader audience, allowing players to enjoy popular titles without the financial commitment. By incorporating ads, Microsoft aims to balance the cost while still delivering a quality gaming experience, potentially reshaping how gamers engage with cloud services.
With Halo: Campaign Evolved, Microsoft Brings Prized Xbox Game to PlayStation
PositiveTechnology
Microsoft's decision to bring Halo to PlayStation marks a significant shift in the gaming landscape, moving away from exclusivity and opening up the beloved franchise to a wider audience. This move not only enhances the gaming experience for PlayStation users but also reflects Microsoft's commitment to inclusivity in gaming, potentially attracting new fans and boosting the franchise's popularity.
Microsoft Re-Introduces Mico, the Face of Its Copilot Assistant to Make AI More Human-Centric
NeutralTechnology
Microsoft has reintroduced Mico, a colorful AI companion designed to enhance its Copilot assistant by making interactions more human-centric. While some industry experts view this move as a nostalgia trap, the question remains whether this quirky feature will resonate with users and prove to be a valuable addition. Mico's ability to change colors based on mood and respond in real-time could potentially enrich user experience, but it also highlights the ongoing debate about the necessity and effectiveness of such AI companions.
Latest from Technology
The striking Swedish workers taking on carmaker Tesla
PositiveTechnology
In Sweden, workers at Tesla are making headlines as they stand up for their rights and push for better working conditions. This movement is significant not only for the employees involved but also for the broader labor landscape in the automotive industry. As more workers advocate for fair treatment, it could inspire similar actions globally, highlighting the importance of worker solidarity and the need for companies to prioritize employee welfare.
Severe performance penalty found in VSCode rendering loop
NegativeTechnology
A significant performance issue has been identified in the rendering loop of Visual Studio Code (VSCode), which could impact user experience. This matters because VSCode is widely used by developers, and any slowdown can hinder productivity and frustrate users. Addressing this issue is crucial for maintaining the software's reputation and ensuring that developers can work efficiently.
However small, just start. From zero to hero
PositiveTechnology
The article emphasizes the importance of taking the first step, no matter how small, in the journey from zero to hero. It encourages readers to embrace their beginnings and highlights that every successful person started somewhere. This message resonates with anyone looking to make a change or pursue their dreams, reminding us that progress often begins with a single action.
Samsung Galaxy Chromebook Plus review
PositiveTechnology
The Samsung Galaxy Chromebook Plus has been reviewed and is being hailed as one of the most luxurious Chromebooks available. With its sleek design and high-end features, it stands out in the crowded market of laptops. This matters because it sets a new standard for what consumers can expect from Chromebooks, blending style with functionality, and could influence future designs in the tech industry.
Superloop just revealed its NBN 2000 plan's typical evening speeds, and I'm suitably impressed
PositiveTechnology
Superloop has made waves in the internet service market by revealing its NBN 2000 plan's impressive typical evening speeds. As one of the few providers offering a 2Gbps plan, Superloop sets itself apart by providing speeds that are sure to impress users. This development is significant as it highlights the growing competition in the NBN space, pushing other providers to enhance their offerings and ultimately benefiting consumers with faster internet options.
I wore the Meta Ray-Bans' successor for a month, and my buying verdict is two-fold
PositiveTechnology
After a month of using the second-generation Meta Ray-Bans, it's clear that they have improved significantly in every aspect compared to the first version. However, it's worth noting that their closest competitor has also stepped up its game, making the choice between the two more challenging. This development is important as it highlights the rapid advancements in smart glasses technology, pushing brands to innovate and enhance user experience.