VulnWatch VulnWatch
← Back to dashboard
Unknown rss_bleepingcomputer · rss_27013c69869a86f841e70e270afe1a26

New attack turned Microsoft 365 Copilot into 1-click data theft tool

Published Jun 15, 2026

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a specially crafted URL. [...]

Affected AI Products

copilot
Get the weekly digest. Every Monday: top AI security stories of the week. Free.