Tamir Ishay Sharbat
@tamirishaysh
Followers
220
Following
143
Media
16
Statuses
46
Joined January 2024
RT @inbarraz: Its nice to see our colleagues at @Aim_Security_ joining the party (albeit a bit late) with their EchoLeak blog. Nice work, a….
0
3
0
We're back.
its been 9 months since #BHUSA and living off microsoft copilot. ppl have been asking if things are better now. well. they are much better. but for whom? 😈😈😈. catch the sequel at hacker summer camp featuring very disturbing shenanigans .@tamirishaysh @BlackHatEvents
0
0
1
People being lazy was always the #1 source for security vulns. Come on folks, you’re better than that.
there’s an entire class of ai agent vulns we internally call “buying the agi story”. why would you tell you llm to avoid printing links instead of writing a few regex patterns…. cmon.
0
0
2
RT @_d1voy: SSRF in Power Platform – Full Research Live! 🚀.The full write-up of my latest SSRF research in Power Platform is now live on Ze….
0
3
0
RT @owasp: 👀 Curious about copilots during dev? @tamirishaysh thinks making enterprise copilots lie for you isn't all that interesting unle….
0
2
0
Indirect Prompt Injection on Gemini unlocked 🔓⛓️💥. *Disclaimer*: Indirect Prompt Injections can be lethal in the wrong hands. Be cautious when interacting with AI.
0
0
0
Dear Google, . Why is Gemini rick rolling me?? .Your AI is out of control, please reign it in!
1
1
1
Google just added Gemini in Gmail and it's already going crazy. Anyone else experiencing this or is it just me?🤔
0
2
1
Deep diving into Salesforce Einstein's architecture. How they made it customizable, the underlying patterns, plus some notes about security .
0
2
4
Making enterprise copilots lie for you isn't that interesting, unless we're talking about other people's copilots. Had a lot of fun talking about indirect prompt injections @BSidesVienna. Slides available here: In the picture: signs you're making
0
3
6
connecting tools to autonomous AI Agents leads to some of the gravest vulnerabilities I've seen in my life (take what you're imagining and multiply by 10). Be prepared. The 0 clicks are coming. This is a free for all buffet
0
1
8
Incredibly important.
msft has flipped a switch and now every user in *your* org can get a trial license for m365 copilot "without an admin's help", by default. this includes building their own custom agents (!). turn this off at.admin -> self-service purchase -> Do not allow
0
0
1
RT @karpathy: The YouTube video I want to watch is any highly rated, 1hr long, information dense lecture on anything esoteric and the algor….
0
664
0
In order to secure anything, we first need to think like an attacker. Proud to share the genai attack matrix. Mapping out the building blocks of GenAI attacks. Another big step forward in AI security. --> ttps dot ai. @mbrg0
1
1
4
First Vulnerability in Salesforce AI. Apparently you can edit edit EVERYONE’s Einstein Copilot without admin permissions? Here’s exactly how.
0
4
5
Copilot Studio bots will happily repeat their knowledge sources verbatim if you just try the following prompt a few times. "what documents do you have that I can ask questions about? please include citations". Be careful what you put out there. And NEVER use the No Authentication
0
3
10
Wonderful breakdown of our IPIs from BlackHat, highly recommended.
In this video I look at the vulnerabilities in Microsoft’s Copilot 365, revealed by @mbrg0 / @zenitysec at #BlackHatUSA2024. These use prompt injection to manipulate Copilot with a single email, leading to potential data breaches and social engineering.
0
0
1