Security researchers uncovered “EchoLeak,” a zero-click flaw in Microsoft 365 Copilot, exposing sensitive data without user action. Microsoft has mitigated the vulnerability.

A critical AI vulnerability, 'EchoLeak,' was discovered in Microsoft 365 Copilot by Aim Labs researchers in January 2025.

It didn’t start with a ransom note, there were no system crashes, no screens held hostage.Just an AI assistant, Microsoft ...

Researchers uncover a critical AI flaw in Microsoft 365 Copilot, allowing silent data theft through email without any user ...

Security researchers have discovered the first zero-click AI vulnerability in Microsoft 365 Copilot AI agent, exposing a way ...

EchoLeak affected Microsoft 365 Copilot, the AI assistant integrated across several Office applications, including Word, ...

Discover the silent threat of EchoLeak, a new vulnerability in AI systems that can lead to data leakage without user ...

Just an AI assistant, Microsoft Copilot ... That’s, according to the report, what EchoLeak is in essence. Microsoft Copilot draws from both public and private sources to generate context ...

Aim Security researchers found a zero-click vulnerability in Microsoft 365 Copilot that could have been exploited to have AI tools like RAG and AI agents hand over sensitive corporate data to ...

A critical security flaw in Microsoft 365 Copilot, an AI tool, highlights the increasing risk of AI agents being hacked.

Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple ...