Hidden Email Prompts Can Manipulate Microsoft Copilot Summaries

🕵️ RESEARCH & DEEP DIVES

• Hidden Email Prompts Can Manipulate Microsoft Copilot Summaries
  Attackers can manipulate AI email summaries with hidden prompts.

  • Microsoft 365 Copilot users and other AI-powered email summarizers are affected.
  • Attacker-controlled text in emails can produce false summaries, deceptive security alerts, or malicious prompts.
  • Invisible HTML and formatting hide instructions from users while remaining readable to AI models.
  • Researchers describe the technique as a cross-prompt injection attack (XPIA).
    📎 Coverage: darkreading.com · 👁 via Dark Reading

• CyberLeek leaks unreleased GTA VI footage in extortion-style campaign
  CyberLeek leaked unreleased GTA VI footage in an extortion campaign.

  • Rockstar Games and parent company Take-Two Interactive are affected.
  • Unreleased GTA VI gameplay clips and apparent map assets were published.
  • CyberLeek used a daily drip-feed of leaks and threatened further releases.
  • Leaked videos promoted a memecoin and crypto donations through watermarked links.
  • Take-Two sought subpoenas targeting Discord, Microsoft, Google and X accounts linked to the leaks.
    📄 Source: x.com · 📎 Coverage: cyberscoop.com · 👁 via CyberScoop

📋 ADVISORIES

• 📄 Source for AnonyMousKIT uses AI voice phishing to unlock stolen iPhones — socradar.io

🔓 CVEs & KEV

• CVE-2026-65083 — CVSS 9.9 — NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioni...

• CVE-2026-80104 — CVSS 9.3 — DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload FilenameDB-...

• CVE-2026-65084 — CVSS 8.1 — NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process,...

• CVE-2026-53965 — CVSS 6.9 — MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial...

• CVE-2026-65086 — CVSS 6.8 — NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handl...