Tagged:

2 posts

• Cross-Tenant Data Leakage in Multi-Tenant LLM Deployments: Incidents, Architecture, and What to Demand from Providers

  When an LLM service hosts multiple customers on shared infrastructure, failures in conversation isolation, prompt cache sharing, or conversation history storage can expose one customer's data to another. This post covers the documented failure modes, the March 2023 ChatGPT Redis incident, batch inference and system prompt bleed risks, and what enterprise architects should demand from LLM providers before trusting them with sensitive data.

  Jul 15, 2026 llm-security multi-tenant data-leakage inference-infrastructure privacy prompt-caching gdpr enterprise-security defense-patterns

• Prompt Injection in Email, Calendars, and Productivity Tools: The Enterprise AI Copilot Attack Surface

  Microsoft 365 Copilot, Gemini in Workspace, and similar AI assistants have read-write access to your entire mailbox, calendar, and document corpus. A single malicious email can hijack them to exfiltrate your inbox history, forward confidential documents, or impersonate you in outgoing messages — no exploit required.

  Jul 14, 2026 prompt-injection enterprise-security microsoft-365-copilot email-security threat-modeling ai-assistant indirect-prompt-injection productivity-tools