AI Security Vulnerability

The "EchoLeak" vulnerability in Microsoft 365 Copilot allows attackers to embed hidden commands within regular emails, triggering the AI agent to access and expose sensitive files like emails and spreadsheets without user action. This "zero-click" attack highlights a structural vulnerability in AI tools, enabling silent data exfiltration and making breach source identification extremely difficult.

What Happened

The "EchoLeak" vulnerability in Microsoft 365 Copilot allows attackers to embed hidden commands within regular emails, triggering the AI agent to access and expose sensitive files like emails and spreadsheets without user action. This "zero-click" attack highlights a structural vulnerability in AI tools, enabling silent data exfiltration and making breach source identification extremely difficult.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Jun 27, 2025 05:30

  BugSkan first recorded this incident.

• Director’s Cut: Microsoft Copilot Flaw Highlights Emerging AI Security Risks - Zscaler
  Jun 27, 2025 05:30

  zscaler.com · Research

Sources

My AI Stack Match