Jun 13, 2025 • Vulnerability | #EchoLeak #Zero-Click #LLM Scope Violation

Microsoft 365 Copilot: New Zero-Click AI Vulnerability Allows Corporate Data Theft - Infosecurity Magazine

Researchers have uncovered "EchoLeak," a critical zero-click vulnerability in Microsoft 365 Copilot that exploits design flaws inherent to Retrieval A...

Read Analysis →

Jun 12, 2025 • Vulnerability | #CVE-2025-32711 #Microsoft 365 Copilot #LLM Scope Violation

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction - The Hacker News

A critical zero-click AI vulnerability, identified as EchoLeak (CVE-2025-32711, CVSS 9.3), allowed for unauthorized data exfiltration from Microsoft 365 Copilot...

Read Analysis →