https://irzubal.com/en/Recent content in irzubal on irzubal · AI security incident analysisHugoen-USSun, 27 Sep 2026 00:00:00 +0300https://irzubal.com/en/incidents/echoleak-m365-copilot/Sun, 27 Sep 2026 00:00:00 +0300https://irzubal.com/en/incidents/echoleak-m365-copilot/Aim Labs showed that M365 Copilot could follow hidden instructions in an incoming email and carry internal data out of the organisation without the user clicking anything. Microsoft fixed it server-side.https://irzubal.com/en/about/Mon, 01 Jan 0001 00:00:00 +0000https://irzubal.com/en/about/<h2 id="why-this-blog-exists">Why this blog exists</h2> <p>In AI security, the best textbook is real incidents. Here I take publicly disclosed AI security incidents and read them from both sides: what the attacker saw, what the defence missed, and what I would have done. Every analysis follows the same six steps and is mapped to the OWASP LLM Top 10 and MITRE ATLAS, so over time the posts become a searchable incident archive.</p>https://irzubal.com/en/tags/Mon, 01 Jan 0001 00:00:00 +0000https://irzubal.com/en/tags/