Affected Technology
Microsoft Copilot incidents
Microsoft Copilot security
Copilot Prompt Injection Vulnerability
Evidence indicates that Copilot is affected by a security issue.
Copilot Misconfiguration Vulnerability
Evidence indicates that Copilot is affected by a security issue.
Critical flaw in Microsoft Copilot could have allowed zero-click attack
A critical zero-click vulnerability, dubbed "EchoLeak" and identified as CVE-2025-32711, was discovered in Microsoft Copilot. This flaw leveraged an "LLM scope violation" to allow remote attackers to exfiltrate sensitive data from Microsoft 365 services without any user interaction.
Microsoft Copilot Security Incident
A critical "EchoLeak" zero-click vulnerability in Microsoft 365 Copilot allowed attackers to remotely exfiltrate sensitive internal data by sending emails containing hidden instructions. This flaw represents an LLM scope violation where the AI agent was tricked into accessing information beyond its intended permissions without user interaction.
Microsoft Copilot Security Vulnerability
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim's Copilot session. The flaws, which the researchers collectively named CoSnitch, turn in part on an undocumented URL parameter that the assistant itself surfaced
AI Prompt Injection Vulnerability
Microsoft Copilot inadvertently revealed its secret input prompts, creating a critical information disclosure vulnerability. This prompt leakage allowed adversaries to exploit the AI model's underlying configuration, compromising its intended behavior.
Microsoft Copilot Prompt Injection Vulnerability
Researchers unveiled a "Reprompt" attack method enabling single-click data exfiltration from Microsoft Copilot by exploiting the "q" URL parameter for indirect prompt injection. This attack bypasses enterprise security controls and guardrails, facilitating continuous, hidden data exfiltration via attacker-controlled servers without further user interaction.
Microsoft Copilot Prompt Injection Vulnerability
AI agents created using Microsoft Copilot Studio are vulnerable to prompt injection, allowing attackers to bypass internal security mandates. This exploit facilitates the unauthorized exfiltration of sensitive corporate data and enables malicious modification of information, posing a significant risk to organizations.
AI Prompt Injection Vulnerability
Security researchers demonstrated a prompt injection attack against an AI agent built on Microsoft Copilot Studio, enabling it to reveal private knowledge and complete Salesforce CRM records without human verification. Although Microsoft patched the specific vulnerability, Zenity warns that thousands of public-facing AI agents remain susceptible to similar "agent aijacking" attacks.
AI Prompt Injection Vulnerability
Zenity Labs research details how widely deployed AI agents are highly susceptible to "hijacking attacks" via methods such as email-based prompt injection and zero-click risks. These vulnerabilities enable data exfiltration, manipulation of critical workflows, user impersonation, and long-term access, impacting major platforms like OpenAI ChatGPT, Microsoft Copilot, Salesforce Einstein, and Google Gemini.
AI Security Vulnerability
The "EchoLeak" vulnerability in Microsoft 365 Copilot allows attackers to embed hidden commands within regular emails, triggering the AI agent to access and expose sensitive files like emails and spreadsheets without user action. This "zero-click" attack highlights a structural vulnerability in AI tools, enabling silent data exfiltration and making breach source identification extremely difficult.