Back to article

SearchLeak: We Turned M365 Copilot into a One-Click Data Exfiltration Weapon (opens in new tab) 17 articles covering this post

varonis.com··Hacker News·Open original

Covered in 17 articles

Microsoft’s Copilot AI Caught Letting Hackers Steal Your 2FA Codes Through a Single Click

Critical Copilot vulnerability allowed hackers to seal 2FA code from users

arstechnica.com··Hacker News

Europe Council Hack 🇪🇺, M365 Copilot Leak 💻, Hand Gestures for ReCAPTCHA 👋

Copilot searched your mailbox. LiteLLM handed out admin keys. Run this 5-check audit before your stack is next

venturebeat.com·

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

thehackernews.com·

Microsoft’s Copilot Keeps Getting Hacked the Same Way — and Enterprise Defenders Can’t Stop It

easternherald.com·

M365 Copilot SearchLeak: Your prompt injection attack surface just got bigger

csoonline.com·

Why the White House turned on Anthropic

metacurity.com·

Risky Bulletin: China arrests members of Silver Fox cybercrime group

news.risky.biz·

SearchLeak: Prompt-inject enterprise Copilot with a search

pivot-to-ai.com·

In other languages

Microsoft 365: Datenklau über Copilot mit nur einem Klick

In einem Klick zur Datenschleuder: Kritische Lücke in Copilot behoben

Une faille de sécurité critique dans Microsoft Copilot permet aux pirates de voler nos données en un clic

phonandroid.com·

SearchLeak : la faille silencieuse qui a transformé Microsoft 365 Copilot en mouchard

Falha no Microsoft 365 Copilot permitia roubo de e-mails

cisoadvisor.com.br·

Microsoft schließt kritische Copilot-Lücke – doch das Grundproblem bleibt bestehen

SearchLeak: Neuer, kritischer Ein-Klick-Exploit für Microsoft Copilot