Home/AI Incident Database/Slack AI made to exfiltrate data from private channels via a public channel message
Slack AI made to exfiltrate data from private channels via a public channel message
A user with no access to a private channel posted instructions in a public channel; when a victim asked Slack AI about content in the private channel, retrieval pulled in the public message and the assistant rendered a phishing link that carried the private data to the attacker.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.