Connect with us

Innovation and Technology

Microsoft Copilot AI Poses Password Security Risk

Published

on

Microsoft Copilot AI Poses Password Security Risk

Introduction to AI-Driven Attacks

AI can be a force for good when it comes to security protections, but also, increasingly, a force for bad. The latter has recently been exemplified in a multi-stage AI-driven attack against Microsoft Teams users, for example. As the name implies, Pen Test Partners is a company that specializes in security consulting, specifically penetration testing. These are professional hackers who can find the exact same routes to compromise your systems that the most advanced attackers would look to exploit. Those threat actors are increasingly using AI-powered attacks, so it makes sense for red team hackers to do likewise.

Red Team Penetration Testers Use Copilot AI To Hack Microsoft SharePoint

Pen Test Partners took a close look at how Microsoft’s Copilot AI for SharePoint could be exploited. The results were, to say the least, concerning. Not least considering an encrypted spreadsheet that the hackers were, quite rightly, rejected from opening by SharePoint, no matter what method was employed, was broken wide open when they asked the Copilot AI agent to go get it. “The agent then successfully printed the contents,” Jack Barradell-Johns, a red team security consultant with the security company, said, “including the passwords allowing us to access the encrypted spreadsheet.”

Access to Passwords

I would strongly recommend reading the full report for all the details of how the red team hackers exploited Copilot AI for SharePoint during their engagement, but I want to focus on the access to passwords, as that’s what has really grabbed my attention, and should grab yours as well. Barradell-Johns explained that during the engagement, the red teamers encountered a file named passwords.txt, located adjacent to an encrypted spreadsheet containing sensitive information. Naturally, they tried to access the file. Just as naturally, Microsoft SharePoint said nope, no way. “Notably,” Barradell-Johns said, “in this case, all methods of opening the file in the browser had been restricted.”

Circumventing Download Restrictions

So, what did the red team hackers do? Use the read team hacking mindset and ask the Copilot AI for Sharepoint agent to go and get it instead. “The agent then successfully printed the contents,” Barradell-Johns reported, “including the passwords allowing us to access the encrypted spreadsheet.” The download restrictions that are part of the restricted view protections were circumvented, and the content of the Copilot chats could be freely copied.

Microsoft Responds To Red Team Copilot AI SharePoint Hacking Report

I reached out to Microsoft, and a spokesperson said: “SharePoint information protection principles ensure that content is secured at the storage level through user-specific permissions and that access is audited. This means that if a user does not have permission to access specific content, they will not be able to view it through Copilot or any other agent. Additionally, any access to content through Copilot or an agent is logged and monitored for compliance and security.” I then contacted Ken Munro, founder of Pen Test Partners, who issued the following statement addressing the points made in the one provided by Microsoft.

Pen Test Partners Response

“Microsoft are technically correct about user permissions, but that’s not what we are exploiting here. They are also correct about logging, but again it comes down to configuration. In many cases, organisations aren’t typically logging the activities that we’re taking advantage of here. Having more granular user permissions would mitigate this, but in many organisations data on SharePoint isn’t as well managed as it could be. That’s exactly what we’re exploiting. These agents are enabled per user, based on licenses, and organisations we have spoken to do not always understand the implications of adding those licenses to their users.” And, you’d better believe, if there are any configuration holes, then Copilot AI will find them.

Conclusion

The use of AI-powered attacks by red team hackers has highlighted a significant vulnerability in Microsoft’s Copilot AI for SharePoint. The ability of the Copilot AI agent to circumvent download restrictions and access sensitive information, including passwords, is a concerning issue that needs to be addressed. While Microsoft has responded by stating that user permissions and logging are in place to protect content, Pen Test Partners has pointed out that configuration holes can be exploited by attackers. It is essential for organizations to be aware of these risks and take steps to mitigate them.

FAQs

  • Q: What is Copilot AI for SharePoint?
    A: Copilot AI for SharePoint is a feature that uses artificial intelligence to assist users with tasks and provide information.
  • Q: How did the red team hackers exploit Copilot AI for SharePoint?
    A: The red team hackers asked the Copilot AI agent to access a restricted file, which was then printed, including passwords, allowing them to access an encrypted spreadsheet.
  • Q: What has Microsoft said about the issue?
    A: Microsoft has stated that user permissions and logging are in place to protect content, but Pen Test Partners has pointed out that configuration holes can be exploited by attackers.
  • Q: What can organizations do to mitigate this risk?
    A: Organizations should review their user permissions and logging configurations to ensure that they are adequate and that they understand the implications of adding licenses to their users.

Innovation and Technology

The AI Economy: How Machines are Creating New Opportunities

Published

on

The AI Economy: How Machines are Creating New Opportunities

Leveraging AI and automation for impact, the world is witnessing a significant transformation in the way businesses operate and people live. The AI economy is unfolding, bringing about unprecedented opportunities and challenges. As machines become increasingly intelligent and capable, they are creating new avenues for growth, innovation, and progress.

Understanding the AI Economy

The AI economy refers to the economic and social implications of the widespread adoption of artificial intelligence and automation technologies. This emerging economy is characterized by the use of machines and algorithms to perform tasks that were previously done by humans, leading to increased productivity, efficiency, and competitiveness. The AI economy is not just about replacing human workers with machines, but about augmenting human capabilities and creating new opportunities for economic growth and development.

Key Drivers of the AI Economy

Several factors are driving the growth of the AI economy, including advances in machine learning, natural language processing, and computer vision. The increasing availability of large datasets, improvements in computing power, and the development of new algorithms and models are also contributing to the rapid expansion of the AI economy. Moreover, the growing demand for automation, personalization, and predictive analytics is fueling the adoption of AI technologies across industries.

The Impact of AI on Industries

The AI economy is having a profound impact on various industries, including healthcare, finance, education, and manufacturing. In healthcare, AI is being used to improve diagnosis, treatment, and patient outcomes, while in finance, AI-powered systems are enhancing risk management, portfolio optimization, and customer service. In education, AI is enabling personalized learning, intelligent tutoring, and automated grading, while in manufacturing, AI is improving production efficiency, quality control, and supply chain management.

AI in Healthcare

The use of AI in healthcare is revolutionizing the way medical professionals diagnose, treat, and manage diseases. AI-powered systems are analyzing medical images, identifying patterns, and making predictions, leading to earlier diagnosis and more effective treatment. Additionally, AI is being used to develop personalized medicine, tailor treatment plans to individual patients, and improve patient outcomes.

AI in Finance

The financial sector is also being transformed by AI, with applications in risk management, portfolio optimization, and customer service. AI-powered systems are analyzing market trends, predicting stock prices, and identifying potential risks, enabling financial institutions to make more informed investment decisions. Moreover, AI is improving customer service, enabling banks and other financial institutions to provide personalized support and advice to their customers.

The Future of Work in the AI Economy

The AI economy is raising important questions about the future of work, as machines and algorithms increasingly perform tasks that were previously done by humans. While some jobs may become obsolete, new ones are emerging, requiring skills in areas such as data science, machine learning, and AI development. The future of work in the AI economy will require workers to develop new skills, adapt to changing job requirements, and be more flexible and agile in their careers.

Upskilling and Reskilling

To remain relevant in the AI economy, workers will need to acquire new skills, particularly in areas such as data science, machine learning, and AI development. Governments, educational institutions, and employers will need to invest in upskilling and reskilling programs, enabling workers to adapt to changing job requirements and remain competitive in the job market.

The Gig Economy and Freelancing

The AI economy is also giving rise to the gig economy and freelancing, as workers increasingly prefer flexible, project-based work arrangements. Platforms such as Upwork, Freelancer, and Fiverr are connecting workers with clients, enabling them to offer their skills and services on a project-by-project basis. The gig economy and freelancing are providing workers with more autonomy, flexibility, and opportunities for career advancement.

Challenges and Concerns

While the AI economy offers many opportunities, it also raises important concerns, including job displacement, bias, and inequality. The use of AI systems can perpetuate existing biases, leading to unfair outcomes and discrimination. Moreover, the concentration of AI development and deployment in a few large companies is raising concerns about market dominance, anticompetitive behavior, and the potential for monopolies.

Job Displacement and Unemployment

The AI economy is likely to displace some jobs, particularly those that involve repetitive, routine, or predictable tasks. Workers in these jobs will need to acquire new skills, adapt to changing job requirements, and be more flexible and agile in their careers. Governments, educational institutions, and employers will need to invest in programs that support workers who are displaced by automation, enabling them to transition to new roles and industries.

Addressing Bias and Inequality

To address bias and inequality in the AI economy, developers, policymakers, and regulators will need to prioritize fairness, transparency, and accountability. This will require the development of more diverse and inclusive AI systems, as well as policies and regulations that promote fairness, equity, and justice. Moreover, there will need to be greater investment in education and training programs that enable workers from diverse backgrounds to acquire the skills they need to succeed in the AI economy.

Conclusion

The AI economy is a rapidly evolving and complex phenomenon, offering many opportunities for growth, innovation, and progress. While it raises important concerns, including job displacement, bias, and inequality, these challenges can be addressed through careful planning, investment, and regulation. As machines and algorithms increasingly perform tasks that were previously done by humans, it is essential to prioritize human well-being, dignity, and agency, ensuring that the benefits of the AI economy are shared by all.

FAQs

What is the AI economy?

The AI economy refers to the economic and social implications of the widespread adoption of artificial intelligence and automation technologies.

How is AI transforming industries?

AI is transforming industries such as healthcare, finance, education, and manufacturing, by improving productivity, efficiency, and competitiveness.

What skills will workers need to succeed in the AI economy?

Workers will need to acquire skills in areas such as data science, machine learning, and AI development, as well as skills that are complementary to AI, such as creativity, empathy, and critical thinking.

How can we address bias and inequality in the AI economy?

To address bias and inequality, developers, policymakers, and regulators will need to prioritize fairness, transparency, and accountability, and invest in education and training programs that enable workers from diverse backgrounds to acquire the skills they need to succeed.

What is the future of work in the AI economy?

The future of work in the AI economy will require workers to develop new skills, adapt to changing job requirements, and be more flexible and agile in their careers, with a growing emphasis on freelancing, gig work, and entrepreneurship.

Continue Reading

Innovation and Technology

Athens Rising As A Startup Hub

Published

on

Athens Rising As A Startup Hub

Introduction to Panathēnea

Imagine a city where the spirit of innovation and connection has thrived for thousands of years. Last week in Athens, that spirit was reborn with the sold-out inaugural Panathēnea festival (with a waiting list!). This vibrant event, a modern echo of ancient gatherings, powerfully announced a bold ambition: this historic city is not just a birthplace of civilization, democracy and innovation, but a rising force aiming to be Europe’s next major startup hub. Anchored by the timeless values of "connection, competition, celebration" and with the confident declaration, "throwing festivals since 566 BC," Panathēnea was more than an industry and arts convergence for me. It felt like a bright signal flare, clearly indicating Athens’ readiness to take its rightful place on the global startup landscape.

The Panathēnea Experience

Returning to my Greek roots as part of the diaspora, I attended the multi-day event impressed by the student-driven and designed program (similar to SLUSH). A mini moonshot in itself, this went from idea to event in a few months! even the Mayor of Athens was surprised. What set this apart was how the event drew in a significant international contingent, from the big AI tech giants like Microsoft, Amazon, OpenAI and Canva, to a surprise attendance of pop star Ke$ha to discuss her new startup Smash ( I was fanboying and also deeply touched by her personal story and drive to launch her startup). It was also a fantastic opportunity to meet with and learn about the burgeoning local startup scene in Athens, which is making great strides in areas from AI, defense, robotics, and more, demonstrating a growing global interest in the Greek capital’s talent. Meeting these founders and learning about their challenges and dreams was incredibly insightful and felt like we were at the tip of an unstoppable force. A truly surreal moment for me was meeting former Prime Minister of Greece and having it confirmed we are distant relatives!

At the intersection of tech and music: Jen Hall (Amazon) interviews Ke$ha on her innovative startup, Smash.

The Unfolding Story: Athens’ Potential as Europe’s Next Tech Hub

The trajectory of the global startup landscape, while dominated by established powerhouses from where I was based in San Francisco in the US consistently reveals the emergence of innovation from unexpected locales. The United States (particularly Californian cities), for instance, continues to lead in overall venture capital investment by a long shot followed by cities in China. However, several cities in Europe demonstrate significant strength in early-stage funding and deep tech development, indicating a robust capacity for future growth. According to several industry reports, early-stage funding in key startup hubs in Europe have shown consistent year-on-year increases, and deep tech investments are attracting a larger share of capital compared to a decade ago. This reflects a strategic shift towards longer-term, more research-intensive ventures with the potential for transformative impact.

The ultimate success of these nascent ecosystems, however, hinges not so much on geography, but on fundamental drivers: product-market fit and the adaptability of founders. Location, while influential, serves as an amplifier of these core dynamics. A supportive environment can significantly increase a startup’s chances of finding product-market fit and adapting to market changes, while a challenging environment can exacerbate these inherent risks.

From Perth to global dominance: Lars Rasmussen (Co-founder Google Maps and Panathēnea mentor) talks scaling with Canva co-founders Melanie Perkins and Cliff Obrecht, exploring their design-wave ride and AI integration.

Why Athens? The Seeds of a Thriving Ecosystem

The city presents a unique value proposition anchored by a substantial reservoir of highly educated, multilingual and technically proficient talent, a strategic geopolitical location at the nexus of Europe, Asia, and Africa offering access to diverse markets, and a significantly more attractive cost structure (critical for startup runway) compared to established European hubs in the north-west. Furthermore, the increasingly engaged global Greek diaspora in their own respective tech hubs from London, San Francisco, New York and as far as Sydney represent a potent source of capital, mentorship, and international networks.

Athens has a unique opportunity to not just catch up, but to strategically leapfrog legacy issues hindering industries. By embracing the transformative power of AI, Athens startups can bypass traditional talent, funding and other bottlenecks and pioneer innovative solutions and go-to-market products and services quicker than ever before. This future-forward approach allows Athens to transcend any notion of "too small" a market or succumb to "imposter syndrome." The confluence of factors, coupled with what I call a "gritty yet chic" urban energy is something of a unique and authentic offering in today’s overly generic, chain-store dominated and hollowed-out central cities.

Sophia Nunes, Portugal’s pioneering woman co-founder of the Unicorn startup Mambu, shares insights on scaling for success

Germination Amidst the Grit: Addressing Foundational Needs

The energy witnessed at Panathēnea and in conversations with local founders signals that the seeds of a thriving startup ecosystem are indeed beginning to germinate. Having personally observed similar early-stage vibrancy in the nascent phases of ecosystems like San Francisco, Berlin, London and Tel Aviv, it’s clear that Athens possesses the raw ingredients for success. However, for Athens (like cities before it), to truly realize its moonshot potential, certain foundational elements require significant cultivation. Building upon initial steps, the immediate priority is laser focus policies to bolster startup infrastructure. This includes streamlining and digital one-stop-shop business formation, taxation, and residency processes to create a frictionless environment for entrepreneurs. Concurrently from the business community, fostering a more collaborative culture, one that actively encourages mentorship and currency of learning over internal competition, is paramount. To ensure long-term viability and attract significant investment, a concerted effort must be made to evolve the funding landscape, actively courting later-stage venture capital to complement existing seed funding. This unwavering focus on these core pillars from efficient infrastructure, a collaborative culture, and a mature funding ecosystem, will be crucial in attracting and retaining both domestic and international talent, ultimately solidifying Athens’ position on the global startup map.

The Decades in the Making: Athens’ Emerging Startup Landscape

Marathon VC’s Panos Papadopoulos and Hack The Box CEO Haris Pylarinos share their insights on scaling passion projects into thriving international businesses

Athens is not without its hurdles; it is just recovering from a deeply painful and prolonged fiscal crisis, Covid shutdowns and acute cost of living impact. While the wounds over this last decade run deep, this is not the first time Athens has been tested. In fact, these ground-truths highlighted a recurring theme at the event- the resilience born from these hardships. While failure in startups can feel inevitable, it happens quickly, and the concept of ‘failing forward’ means these Greek startups are unlikely to retreat easily.

This tenacity gives the impression that Athens is already an overnight success, but in reality, it has been decades in the making. Credit is due to the founders, VCs, and policy supporters who have diligently addressed each barrier over the years. Addressing infrastructural limitations and fostering a risk-tolerant, ‘fail fast’ investment culture will be crucial. However, the fundamental ingredients: the rising talent, strategic location, compelling value proposition, and burgeoning entrepreneurial spirit are undeniably present. The energy is shifting, the ambition and hunger is real, and the various pieces are starting to come together. The potential for Athens to become Europe’s next significant startup ‘moonshot’ is increasingly viable. The world of venture capital and global innovation would be wise to pay close attention to the unfolding future story in this ancient city.

Conclusion

In conclusion, the inaugural Panathēnea festival marked a significant milestone in Athens’ journey to become a leading startup hub in Europe. With its unique blend of innovation, art, and culture, the city is poised to attract international talent, investment, and attention. While there are challenges to be addressed, the seeds of a thriving ecosystem are germinating, and the potential for Athens to become a major player in the global startup landscape is undeniable.

FAQs

Q: What is Panathēnea?
A: Panathēnea is a modern festival of tech, art, and startups that aims to celebrate innovation and connection in Athens, Greece.
Q: What are the key factors that make Athens an attractive location for startups?
A: Athens offers a unique value proposition with its highly educated and multilingual talent, strategic location, and attractive cost structure.
Q: What are the main challenges that Athens needs to address to become a leading startup hub?
A: Athens needs to focus on building a supportive infrastructure, fostering a collaborative culture, and evolving its funding landscape to attract and retain talent and investment.
Q: What is the significance of the Panathēnea festival for Athens’ startup ecosystem?
A: The Panathēnea festival marks a significant milestone in Athens’ journey to become a leading startup hub, showcasing the city’s potential and attracting international attention and investment.

Continue Reading

Innovation and Technology

Immigration Fees Prompt Decline

Published

on

Immigration Fees Prompt Decline

Introduction to H-1B Visa Registrations

The U.S. Citizenship and Immigration Services (USCIS) seal is displayed on a mobile phone screen. H-1B cap registrations declined this year, but U.S. Citizenship and Immigration Services still rejected almost two-thirds of applications due to the low annual H-1B limit. Higher immigration fees and other factors contributed to the drop in registrations for FY 2026. An H-1B visa is often the only practical way a high-skilled foreign national, including an international student, can work long term in the United States. The H-1B visa category remains the most restrictive in the U.S. immigration system.

USCIS Results Show Impact Of Immigration Fees And Annual Limit

USCIS released H-1B cap results for FY 2026 that showed a decline in registrations. The immigration service makes selections by lottery in any year the agency receives more H-1B electronic registrations than permitted by the annual limit. The H-1B annual limit is 65,000 plus a 20,000 exemption for individuals with an advanced degree from a U.S. university. For the past two decades, employers have exhausted the quota every year.

For FY 2026, USCIS received 343,981 eligible registrations, a decline of 27% from 470,342 for FY 2025. Higher immigration fees likely contributed to the drop in H-1B registrations. A Biden administration fee rule raised the cost of filing an H-1B registration for FY 2026 from $10 to $215.

Factors Contributing to the Decline in Registrations

“With the higher fee this year, employers had to make a more informed economic decision about how many employees to enter into the lottery,” said Kevin Miner of Fragomen. “That being said, we continued to see very high demand, and regardless of the decrease in registrations, many people who need H-1B status still were not selected.” The number of unique employers increased, going from approximately 52,700 for FY 2025 to 57,600 for FY 2026, a rise of 9%. However, H-1B registrations filed per employer declined. For FY 2026, employers filed an average of 6.0 eligible registrations, a decline of 33% from 8.9 eligible registrations per employer for FY 2025, according to a National Foundation for American Policy analysis.

Immigration Restrictions Continue To Limit The Ability To Hire Foreign-Born Talent

Despite the lower number of H-1B registrations, nearly two-thirds were rejected due to the annual limit of 85,000. USCIS selected 120,141 registrations out of 343,981, or 35%. That means the agency rejected 65% of registrations because of the numerical limit. USCIS selects more than 85,000 registrations to account for denials and withdrawn or abandoned applications.

Only 85,000 new H-1B visa holders will begin work in FY 2026 for cases that count against the annual limit. That means only 25% of the 343,981 eligible registrations will result in new H-1B workers for companies in FY 2026, up from 20% in FY 2025. Still, according to an NFAP analysis, the H-1B visa category remains the most restrictive. In FY 2024, the State Department approved 89% of J-1 visas for exchange visitors and 96% of H-2A visas for agricultural workers.

Impact on Employers and Foreign-Born Talent

A European teenager is three times more likely to get a visa to work at a summer amusement park than a graduate student is to receive H-1B status to work for a U.S. company on artificial intelligence. In recent months, the State Department has revoked or threatened to revoke thousands of visas for international students.

“There are still a lot of individuals who have been entered into the lottery multiple times that have not been selected, so employers need to continue to look at their foreign national population, including recent hires who might have two or three years of Optional Practical Training still available to them, and get lottery entries in next March to maximize the chances of being selected,” said Kevin Miner.

Research by economist Britta Glennon concluded that immigration laws restricting H-1B visas result not in more employment for U.S. workers but more jobs leaving the United States. According to attorney Vic Goel, “The overall shortage of H-1B visas continues to pressure employers to explore alternatives, whether through other visa categories or offshoring.”

Conclusion

The decline in H-1B registrations for FY 2026 can be attributed to various factors, including higher immigration fees and the annual limit. Despite the decrease in registrations, the H-1B visa category remains the most restrictive, with nearly two-thirds of applications being rejected due to the numerical limit. Employers and foreign-born talent continue to face challenges in the U.S. immigration system, with many individuals being forced to explore alternative options or face rejection.

FAQs

  1. What is the H-1B visa annual limit?
    The H-1B visa annual limit is 65,000 plus a 20,000 exemption for individuals with an advanced degree from a U.S. university.
  2. How many H-1B registrations were received by USCIS for FY 2026?
    USCIS received 343,981 eligible registrations for FY 2026.
  3. What is the percentage of H-1B registrations that were rejected due to the numerical limit?
    65% of H-1B registrations were rejected due to the numerical limit.
  4. How many new H-1B visa holders will begin work in FY 2026?
    Only 85,000 new H-1B visa holders will begin work in FY 2026 for cases that count against the annual limit.
  5. What is the impact of immigration laws restricting H-1B visas on U.S. employment?
    Research by economist Britta Glennon concluded that immigration laws restricting H-1B visas result not in more employment for U.S. workers but more jobs leaving the United States.
Continue Reading
Advertisement

Our Newsletter

Subscribe Us To Receive Our Latest News Directly In Your Inbox!

We don’t spam! Read our privacy policy for more info.

Trending