Back to AIBriefs
AnalysisCybersecurity

SearchLeak flaw in Microsoft 365 Copilot exposes emails, files, MFA codes

A single click on a trusted Microsoft link could leak emails, calendar details, and indexed files from Microsoft 365 Copilot Enterprise Search. Researchers at Varonis Threat Labs chained three bugs into a one-click exfiltration path called SearchLeak.

21 hours ago
SearchLeak flaw in Microsoft 365 Copilot exposes emails, files, MFA codes — AIBriefs