When Your AI Assistant Follows the Wrong Instructions: Skill Poisoning in Copilot Cowork
Imagine you are the new CFO of a fast-food chain. To keep up with your inbox, you ask Copilot Cowork to summarize the top ten newsletters from your private Gmail account every morning. It saves time, and nobody in IT ever hears about it. At AltSecCON 2026, a red-team speaker from Altered Security showed how…