Security researchers uncovered “EchoLeak,” a zero-click flaw in Microsoft 365 Copilot, exposing sensitive data without user action. Microsoft has mitigated the vulnerability.

The vulnerability, called “EchoLeak,” lets attackers “automatically exfiltrate sensitive and proprietary information” from Microsoft 365 Copilot without knowledge of the user, according to findings ...

A new attack dubbed 'EchoLeak' is the first known zero-click AI vulnerability that enables attackers to exfiltrate sensitive data from Microsoft 365 Copilot from a user's context without interaction.

This is EchoLeak, a critical vulnerability in Microsoft 365 Copilot that lets hackers steal sensitive corporate data without a single action from the victim.

Explore Microsoft 365's June 2025 update, featuring AI-powered assistants, advanced security, and tools to simplify your ...

The nature of the vulnerability means that the user doesn’t need to click anything or interact with a message for an attacker to access sensitive information from apps and data sources connected to ...

Microsoft has released Windows 11 KB5062553 and KB5062552 cumulative updates for versions 24H2 and 23H2 to fix security ...

Millions of companies use the Microsoft 365 suite of tools every day to create, communicate, and collaborate, but far fewer ...

What This Vulnerability Teaches Us About AI SecurityThe recent disclosure of EchoLeak by Aim Labs marks a significant milestone in AI security research. As the first documented zero-click exploit ...

CrowdStrike Charlotte AI, Atera Autopilot and Microsoft 365 Copilot are among the hottest AI tools of 2025 so far.

The Kiteworks research reveals that 27% of life organizations acknowledge that more than 30% of their AI-processed data ...

Its first bid to buy Wiz, a US-Israeli cloud security startup, for $23bn, in July 2024, was rejected. Alphabet closed the deal in March, paying $32bn. The mega-deal shows just how important cloud ...