Xatolos@reddthat.com to Technology@lemmy.worldEnglish · 3 months agoMicrosoft to host security summit after CrowdStrike disasterarstechnica.comexternal-linkmessage-square34fedilinkarrow-up1234arrow-down15
arrow-up1229arrow-down1external-linkMicrosoft to host security summit after CrowdStrike disasterarstechnica.comXatolos@reddthat.com to Technology@lemmy.worldEnglish · 3 months agomessage-square34fedilink
minus-squarejordanlund@lemmy.worldlinkfedilinkEnglisharrow-up39arrow-down2·3 months agoLess concerned about Crowdstrike since it’s not their product. More concerned about Copilot: https://www.wired.com/story/microsoft-copilot-phishing-data-extraction/
minus-squareWomble@lemmy.worldlinkfedilinkEnglisharrow-up14arrow-down1·3 months agoThat seems a bit of a non-story given that its prefaced on “once the attacker has access to your work email”. Yes once they have that they can do very good spear phishing attacks using copilot, but they could easily do them without copilot too.
Less concerned about Crowdstrike since it’s not their product.
More concerned about Copilot:
https://www.wired.com/story/microsoft-copilot-phishing-data-extraction/
That seems a bit of a non-story given that its prefaced on “once the attacker has access to your work email”. Yes once they have that they can do very good spear phishing attacks using copilot, but they could easily do them without copilot too.