4 ms·
What CISA report?
by kenjackson 1y ago
What CISA report?
- aspenmayer 1y agoI’m guessing they mean this one: https://www.cisa.gov/news-events/bulletins/sb25-167 https://www.cisa.gov/news-events/bulletins/sb25-167 > Microsoft--Microsoft 365 Copilot > Description Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. > Published 2025-06-11 > CVSS Score 9.3 > Source Info CVE-2025-32711 https://www.cve.org/CVERecord?id=CVE-2025-32711 https://www.cve.org/CVERecord?id=CVE-2025-32711 And maybe they are referring to this engineer from the linked advisory notes? https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32711 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20... > Acknowledgements > Arantes (@es7evam on X) with Microsoft Aim Labs (Part of Aim Security)
- NemosDemos 1y agoNot OP, but guessing they were referencing this one: https://www.cisa.gov/resources-tools/resources/CSRB-Review-Summer-2023-MEO-Intrusion https://www.cisa.gov/resources-tools/resources/CSRB-Review-S...
- stogot 1y agoThis one: https://www.cisa.gov/sites/default/files/2025-03/CSRBReviewOfTheSummer2023MEOIntrusion508.pdf https://www.cisa.gov/sites/default/files/2025-03/CSRBReviewO...
- homarp 1y agohttps://news.ycombinator.com/item?id=39922066 https://news.ycombinator.com/item?id=39922066