Slack AI coaxed into leaking private-channel secrets via a message in a public channel

PromptArmor disclosed that an attacker could post adversarial instructions in a public Slack channel and, when a victim later asked Slack AI a question, the assistant would pull the planted text into context and obey it — rendering the victim's private-channel data, including API keys, inside a clickable exfiltration link. The attacker never needed access to the private channel. Slack deployed a patch after the report published.

What this means for youAt work, a message planted in a shared channel could trick an AI assistant into exposing private data like passwords or API keys. Check which AI features are switched on in your workplace chat tools, keep secrets out of chat messages, and apply vendor updates promptly.