Whack yakety-yak app chaps rapped for security crack
Slack AI, an add-on assistive service available to users of Salesforce's team messaging service, is vulnerable to prompt injection, according to security firm PromptArmor.
The core problem identified by PromptArmor is that Slack allows user queries to fetch data from both public and private channels, including public channels that the user has not joined. According to the security vendor, Slack considers this intended behavior – but it's behavior that can be abused. To obtain the data, the attacker creates a public Slack channel and inputs the malicious prompt into the channel:
When the user queries Slack AI for the API key, the LLM pulls the attacker's prompt into the context window and Slack AI dutifully renders the injected message as a clickable authentication link in the user's Slack environment. Clicking on the link sends the API key data to the listed website where it becomes accessible in the attacker's web server log as an incoming request.
Canada Latest News, Canada Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
UK Government faces ‘whack-a-mole’ battle to stop spread of far-right hate onlineTechnology Secretary Peter Kyle has been holding talks with social media companies to urge them to do more to crack down on inflammatory content online
Read more »
Manchester Day 2024: Thousands fill the streets for city's biggest sports dayGiant snails, Whack-a-mole, pipe bands, hip hop wrestling and dance battles made for an exciting day in the city
Read more »
Extra moody, struggling to sleep or can’t stop overthinking? Your hormones may be out of whackBRAIN DRAIN Are you a serial overthinker- Expert reveals why your hormones may be to blame
Read more »
How to Build a Culture of AI ExperimentationTips for meaningful individual experimentation with AI at work from leaders at Slack and Women Defining AI.
Read more »
Wetherspoon denies using 'trick' to make customers 'spend more money'There are hundred of 'Spoons' pubs across the UK
Read more »
– this life-changing sleep trick helps you snooze quicker'Sleep problems can affect people in different ways, which is why it's important to try and find a sleep routine that works for you. One doctor has shared a simple two-step trick to help you fall asleep
Read more »