This vulnerability can allow attackers to steal anything a user puts in a private Slack channel by manipulating the language model used for content generation. This was responsibly disclosed to Slack (more details in Responsible Disclosure section at the end).
Group critical of AI-generated art says it has obtained swaths of data from Disney’s Slack channels
Because we take security, privacy, and transparency very seriously, we are sharing the details of a recent incident.
New research shows how third-party apps could be exploited to infiltrate these sensitive workplace tools.
