Back to article

Critical Copilot vulnerability allowed hackers to seal 2FA code from users (opens in new tab)

Covers SearchLeak: We Turned M365 Copilot into a One-Click Data Exfiltration WeaponCovered by 5 sources including Futurism, Windows CentralDiscussed on Hacker News

Covers 1 related story

SearchLeak: We Turned M365 Copilot into a One-Click Data Exfiltration Weapon

Discussed on Hacker News and r/netsec

Covered in 5 articles

Microsoft’s Copilot AI Caught Letting Hackers Steal Your 2FA Codes Through a Single Click

Windows Central

·

A "critical" Microsoft Copilot exploit exposes AI gullibility — turning the chatbot into a data snitch for 2FA codes and sensitive emails

Microsoft patches critical SearchLeak vulnerability in Copilot for Microsoft 365

ideatrash.net·

Roundup of links for 16 Jun.

In other languages

Microsoft schließt kritische Copilot-Lücke – doch das Grundproblem bleibt bestehen