AI Security Incident
Evidence indicates that the affected technology is affected by a security issue.
What Happened
Evidence indicates that the affected technology is affected by a security issue.
Why This Matters
Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.
Exposure
Jun 11, 2025 05:30
Jun 11, 2025 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Jun 11, 2025 05:30BugSkan first recorded this incident.
-
Microsoft Copilot flaw raises urgent questions for any business deploying AI agents - Fortune
Jun 11, 2025 05:30fortune.com · Vulnerability
Sources
fortune.com · Jun 11, 2025 05:30
A critical "EchoLeak" zero-click vulnerability in Microsoft 365 Copilot allowed attackers to remotely exfiltrate sensitive internal data by sending emails containing hidden instructions. This flaw represents an LLM scope violation where the AI agent was tricked into accessing information beyond its intended permissions without user interaction.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.