Prompt Injection: The Core Problem

Researchers at Aim Labs reported a flaw in Microsoft 365 Copilot, and they named it EchoLeak. An attacker could send an ordinary-looking email, and the recipient did not need to click anything. When the recipient later asked Copilot a routine question, Copilot could read the email, follow the text inside it, and send private data out through web addresses. Microsoft fixed the flaw on its own servers, and its advisory lists it as not exploited.

The attack broke no password and no server. It used sentences, and the assistant treated them as instructions