logo

Microsoft dangles $10K for hackers to hijack LLM email service

ID: 6a26122f-2993-520b-a2e2-af6b5c1c3feb

STIX ID: report--6a26122f-2993-520b-a2e2-af6b5c1c3feb

Feed Name: The Register (Security)

Date Published: 2024-12-09

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

Microsoft, IST Australia, and ETH Zurich launched the LLMail-Inject challenge, a simulated LLM-powered email service where attackers craft prompt injections to trigger unintended actions or data leakage while evading layered defenses (Spotlighting, PromptShield, LLM-as-a-judge, TaskTracker). Opening Dec 9 (1100 UTC) through Jan 20 (1159 UTC), the contest offers a $10,000 prize pool and a live scoreboard for teams (1–5 members), spotlighting real-world AI security risks and referencing previously fixed Copilot flaws.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.