News

Exclusive: New Microsoft Copilot flaw signals broader risk of AI agents being hacked—‘I would be terrified’
Microsoft 365 Copilot, the AI tool built into Microsoft Office workplace applications including Word, Excel, Outlook, ...
First Known Zero-Click AI Exploit: Microsoft 365 Copilot’s ‘EchoLeak’ Flaw
Security researchers uncovered “EchoLeak,” a zero-click flaw in Microsoft 365 Copilot, exposing sensitive data without user ...
CSO Online1d
First-ever zero-click attack targets Microsoft 365 Copilot
A single email can silently trigger Copilot to exfiltrate sensitive corporate data — no clicks, no warnings, no user action.
Security Boulevard13h
Zero-Click Flaw in Microsoft Copilot Illustrates AI Agent, RAG Risks
Aim Security researchers found a zero-click vulnerability in Microsoft 365 Copilot that could have been exploited to have AI tools like RAG and AI agents hand over sensitive corporate data to ...
Critical vulnerability in Microsoft 365 Copilot shows risk of AI agents
The M365 AI agent could be tricked into releasing sensitive information via email and without a mouse click. Microsoft has ...
Researchers Just Found a Big Security Flaw in Microsoft’s AI. Here’s Why Businesses Should Worry
Microsoft’s been inserting AI everywhere it can, including into some of the world’s most popular business productivity apps. ...
Microsoft 365 Copilot’s Data Exposed – Hit by Zero-Click Vulnerability
Security researchers at Aim Security discovered "EchoLeak", the first known zero-click artificial intelligence (AI) ...
ET CIO2h
The silent threat in your AI stack: Why EchoLeak is a wake-up call for CXOs
Discover the silent threat of EchoLeak, a new vulnerability in AI systems that can lead to data leakage without user ...
Critical flaw in Microsoft Copilot could have allowed zero-click attack
Researchers said the vulnerability, dubbed “EchoLeak,” could allow a hacker to access data without any specific user ...
Aim Security details first known AI zero-click exploit targeting Microsoft 365 Copilot
Critically, according to Aim’s researchers, all of this happens behind the scenes. Users themselves don’t have to open the ...
How To Conduct Red Teaming Of AI Copilots
Here, I'll outline how CISOs can assign red teams to hunt for such files, some examples of real-world findings and suggested ...
AOL2d
Exclusive: New Microsoft Copilot flaw signals broader risk of AI agents being hacked—’I would be terrified’
Microsoft 365 Copilot, the AI tool built ... harbored a critical security flaw that, according to researchers, signals a broader risk of AI agents being hacked. The flaw, revealed today by AI ...