SearchLeak: We Turned M365 Copilot into a One-Click Data Exfiltration Weapon (opens in new tab)  🔒Cybersecurity  Content type: Blog  17 articles covering this post

Varonis Threat Labs discovered SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows an attacker to steal sensitive data — MFA codes, email messages, meeting details, and private organizational files — with a single click.