Security researchers uncovered “EchoLeak,” a zero-click flaw in Microsoft 365 Copilot, exposing sensitive data without user action. Microsoft has mitigated the vulnerability.

A new attack dubbed 'EchoLeak' is the first known zero-click AI vulnerability that enables attackers to exfiltrate sensitive data from Microsoft 365 Copilot from a user's context without interaction.

S ecurity researchers from Aim Labs uncovered a critical attack dubbed 'EchoLeak' impacting Microsoft 365 Copilot.The vulnerability could potentially allow bad actors to gain unauthorized access ...

First-ever zero-click attack targets Microsoft 365 Copilot. News. ... Echoes beyond Microsoft “EchoLeak marks a shift to assumption-of-compromise architectures,” Garg stated.

Microsoft announced that Microsoft 365 Copilot would get Memories shortly after announcing the feature for Copilot in Windows ...

Microsoft is giving its AI assistant a serious personalization boost. Starting this month, Microsoft 365 Copilot will get the ...

Microsoft has fixed a dangerous zero-click attack in its Generative Artificial Intelligence (GenAI) model which could have allowed threat actors to silently exfiltrate sensitive corporate data without ...

Microsoft 365 Copilot, the AI tool built into Microsoft Office workplace applications including Word, Excel, Outlook, PowerPoint, and Teams, harbored a critical security flaw that, according to ...

EchoLeak affected Microsoft 365 Copilot, the AI assistant integrated across several Office applications, including Word, Excel, Outlook, PowerPoint, and Teams. According to researchers at Aim ...

Microsoft 365 Copilot has a feature called RAG (Search Augmentation Generation) that refers to the contents of files stored in mailboxes and OneDrive, chat history in Teams, etc. to answer ...