PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

AI In Windows: Investigating Windows Copilot

blog.trailofbits.com | blog | #ai-security | #microsoft | #windows | #reverse-engineering | #privacy | #copilot
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Yarden Shafir dissects Windows Copilot: the side pane is Edge running Bing AI inside msedge.exe, with no local model—machine data goes to remote servers, raising privacy and reliability concerns.
Published
Collected

Related coverage

tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
tool · github.com
LogonStealer: Windows Credential Provider DLL for Stealing Plaintext Passwords via CredProvDataModel Hooks
Demonstrates an effective post-exploitation technique targeting the modern Windows 11 WinRT logon architecture to harvest plaintext credentials while bypassing PPL.
blog · blog.trailofbits.com
How Trail of Bits helps verify the integrity of your Signal chats
Trail of Bits explains Signal's Automatic Key Verification key-transparency system and describes the independent auditor it operates, one of three signers that make server key substitution detectable.
blog · bishopfox.com
Otto Support - The Confused Deputy
Confused deputy attacks: agents reading attacker-controlled tickets or invites follow hidden instructions with their own privileges, as EchoLeak and ConfusedPilot show; layered mitigations covered.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
Back