Jun 27, 2025 • Vulnerability | #EchoLeak #Microsoft 365 Copilot #Zero-click AI attack

Director’s Cut: Microsoft Copilot Flaw Highlights Emerging AI Security Risks - Zscaler

The "EchoLeak" vulnerability in Microsoft 365 Copilot allows attackers to embed hidden commands within regular emails, triggering the AI agent to acce...

Read Analysis →

Jun 13, 2025 • Vulnerability | #EchoLeak #Zero-Click #LLM Scope Violation

Microsoft 365 Copilot: New Zero-Click AI Vulnerability Allows Corporate Data Theft - Infosecurity Magazine

Researchers have uncovered "EchoLeak," a critical zero-click vulnerability in Microsoft 365 Copilot that exploits design flaws inherent to Retrieval A...

Read Analysis →

Jun 11, 2025 • Vulnerability | #CVE-2025-32711 #EchoLeak #Zero-click attack

Critical flaw in Microsoft Copilot could have allowed zero-click attack - Cybersecurity Dive

A critical zero-click vulnerability, dubbed "EchoLeak" and identified as CVE-2025-32711, was discovered in Microsoft Copilot. This flaw leveraged an &...

Read Analysis →

Jun 11, 2025 • Vulnerability | #EchoLeak #Zero-click attack #LLM scope violation

Microsoft Copilot flaw raises urgent questions for any business deploying AI agents - Fortune

A critical "EchoLeak" zero-click vulnerability in Microsoft 365 Copilot allowed attackers to remotely exfiltrate sensitive internal data by sending em...

Read Analysis →