Microsoft Data Exposure
Evidence indicates that Microsoft is affected by data exposure.
What Happened
Evidence indicates that Microsoft is affected by data exposure.
Why This Matters
The evidence matters to defenders using Microsoft because it may expose sensitive data handled by affected deployments.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether Microsoft is present in your environment and review the affected configuration.
Exposure
Mar 05, 2026 05:30
Mar 05, 2026 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Mar 05, 2026 05:30BugSkan first recorded this incident.
-
Malicious AI Assistant Extensions Harvest LLM Chat Histories - Microsoft
Mar 05, 2026 05:30microsoft.com · Data Leak
Sources
microsoft.com · Mar 05, 2026 05:30
Malicious Chromium-based browser extensions are impersonating legitimate AI tools to harvest sensitive LLM chat histories and browsing data, impacting over 900,000 installs and 20,000 enterprise tenants. These extensions exfiltrate proprietary code, internal workflows, and confidential data to threat actor-controlled infrastructure, leading to widespread information leakage.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.