Sandbox Escapes with Rubrik’s Zero Labs, AI recorders eroding privacy, and the news - Joe Hladik - ESW #472

2026-08-17

Download

Interview with Jon Hladik - ChatMate Imagine a user asks an LLM a question about a document. An attacker then gains an interactive prompt on the user’s chat session, enabling the attacker to instruct the AI assistant to take actions on behalf of the victim. That is exactly the capability researchers at Rubrik Zero Labs were able to demonstrate in a recent study designed to test the bounds of LLM security. Join Joe Hladik, Head of Rubrik Zero Labs, as he breaks down the discovery of "Remote Prompt Execution," a novel vulnerability c...

Interview with Jon Hladik - ChatMate

Imagine a user asks an LLM a question about a document. An attacker then gains an interactive prompt on the user’s chat session, enabling the attacker to instruct the AI assistant to take actions on behalf of the victim. That is exactly the capability researchers at Rubrik Zero Labs were able to demonstrate in a recent study designed to test the bounds of LLM security.

Join Joe Hladik, Head of Rubrik Zero Labs, as he breaks down the discovery of "Remote Prompt Execution," a novel vulnerability class that enabled full takeovers of Microsoft Copilot sessions through sandbox escapes. He explores the technical journey behind the eight critical CVEs uncovered by Rubrik Zero Labs and discusses the broader implications for securing generative AI assistants within enterprise environments. This interview highlights the groundbreaking research that earned a $48,000 bounty and featured as a premier briefing at Black Hat USA.

Segment Resources:

Find more research from Rubrik Zero Labs
Rubrik Zero Labs' Black Hat session
Demo of the ChatMate attack in action

This segment is sponsored by Rubrik. Visit https://securityweekly.com/rubrik to learn more about them!

Topic Segment - AI Notetakers and Recorders

AI notetakers are built into everything now, and hardware-based AI recorders are becoming mainstream as well. Is privacy over in the workplace? Adrian, Jackie, Katie, and Tyler discuss.

Questions enterprises should be asking:

Are employees recording or transcribing meetings?
Does this policy change if non-employees (external parties) are present?
Is consent asked for/given?
Is the context of the conversation taken into consideration?
Is the geographic/legal/political context of the external party taken into account?
Have you done your due diligence on third parties hosting/storing these recordings and transcriptions?
Was your due diligence a SOC 2, or real, actual evidence-based due diligence?
Do these third parties have an option to allow you to store/manage your own recordings in a place of your choosing, or does it have to be hosted by the AI recording/transcription company?

News Segment

Finally, in the enterprise security news,