News

First Known Zero-Click AI Exploit: Microsoft 365 Copilot’s ‘EchoLeak’ Flaw
Security researchers uncovered “EchoLeak,” a zero-click flaw in Microsoft 365 Copilot, exposing sensitive data without user action. Microsoft has mitigated the vulnerability.
Infosecurity Magazine5d
Microsoft 365 Copilot: New Zero-Click AI Vulnerability Allows Corporate Data Theft
Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple ...
Microsoft 365 Copilot’s Data Exposed – Hit by Zero-Click Vulnerability
Security researchers at Aim Security discovered "EchoLeak", the first known zero-click artificial intelligence (AI) ...
CSO Online5d
First-ever zero-click attack targets Microsoft 365 Copilot
A single email can silently trigger Copilot to exfiltrate sensitive corporate data — no clicks, no warnings, no user action.
Critical flaw in Microsoft Copilot could have allowed zero-click attack
Researchers said the vulnerability, dubbed “EchoLeak,” could allow a hacker to access data without any specific user ...
PCMag on MSN11d
A OneDrive Security Flaw Might Share Everything in Your Cloud With Third-Party Services
Be careful when using OneDrive’s File Picker to share access to your documents. Vague language indicates services like ...
Security Boulevard11d
OAuth Tokens: The Danger Behind the Commvault Breach
How AppOmni’s powerful SaaS security platform steps in to stop threats before they strike. The post OAuth Tokens: The Danger ...
OneDrive File Picker flaw grants full drive access when users share a single file
Microsoft is being extremely careless with security boundaries in OneDrive. A recent Oasis Security analysis revealed that ...
CPO Magazine15d
Security Flaw in Microsoft OneDrive File Picker Could Give Apps Full Cloud Storage Access
Researchers found a security flaw in OneDrive File Picker that grants apps access to any and all files in the account when ...
A key Microsoft OneDrive feature has a worrying security flaw which could expose user data
Researchers found a flaw in Microsoft OneDrive File PickerThe flaw stems in the lack of fine-grained OAuth permissionsMicrosoft acknowledges the flaw, but hasn't fixed it yetA vulnerability in ...