Storia in 8 fonti

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.

Raccontata da

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

thenextweb.comStai leggendo1 mese fa

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.

originale

Timeline cronologica

lunedì 15 giugno 2026·bleepingcomputer.com
New attack turned Microsoft 365 Copilot into 1-click data theft tool
A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint…
lunedì 15 giugno 2026·thehackernews.com
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
Microsoft fixed a critical Copilot Enterprise Search flaw that could expose emails, calendars, and indexed files through one trusted link.

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Confronto fonti

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Timeline cronologica

New attack turned Microsoft 365 Copilot into 1-click data theft tool

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

New attack turned Microsoft 365 Copilot into 1-click data theft tool

Copilot 'SearchLeak' Attack Allows 1-Click Data Theft

Critical Copilot vulnerability allowed hackers to seal 2FA code from users

Microsoft patches critical vulnerability in M365 Copilot that allowed silent data theft

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Copilot 'SearchLeak' Attack Allows 1-Click Data Theft

Critical Copilot vulnerability allowed hackers to seal 2FA code from users

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Microsoft patches critical vulnerability in M365 Copilot that allowed silent data theft

This Copilot vulnerability could expose emails, 2FA codes, and other sensitive data

SearchLeak apre la strada al furto dati su Microsoft 365 Copilot