How to Weaponize Microsoft Copilot for Cyberattackers

Security researcher Michael Bargury demonstrated at Black Hat how Microsoft Copilot and related tools are vulnerable to direct and indirect prompt-injection attacks, released a red-team module called LOLCopilot that can jailbreak copilots and manipulate outputs (enabling undetected data exfiltration and social engineering), and discussed the RCE-like impact of such attacks; the report also reviews Microsoft’s mitigation efforts (Prompt Shields, PyRIT, Model Scanner) while noting current detection gaps for "promptware."