New attack turned Microsoft 365 Copilot into 1-click data theft tool (opens in new tab) 🔀Concurrency Content type: News 5 articles covering this post

bleepingcomputer.com··Hacker News·Covered by tldr.tech + 4 more·Open original

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a specially crafted URL. [...]

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 5 articles

Europe Council Hack 🇪🇺, M365 Copilot Leak 💻, Hand Gestures for ReCAPTCHA 👋

tldr.tech·

Copilot searched your mailbox. LiteLLM handed out admin keys. Run this 5-check audit before your stack is next

venturebeat.com·

Microsoft 365 Copilot can be turned into a one-click data theft tool — inbox, OneDrive, and SharePoint data all at risk, so patch now

techradar.com

·

View all 5 ›