WARPTECHNEWS · LAB

Home AI Business Tech Archive

Storia: Copilot 'SearchLeak' Attack Allows 1-Click Data Theft — Warptech Lab News

WARPTECH LAB NEWS

Warptech Lab News aggrega le notizie più rilevanti da oltre 700 fonti internazionali, con classificazione AI, TL;DR sintetici e timeline cluster su singole storie.

Navigazione

Home
Archivio
Editor's Brief
Cerca
Il tuo account
Newsletter tech/AI

Informazioni legali

Privacy Policy
Termini di servizio
Cookie Policy

© 2026 Sparktech S.R.L. — Tutti i diritti riservati. Sito gestito e manutenuto da Sparktech S.R.L.

Sede legale: Corso Libertà 55, 13100 Vercelli (VC), Italia · P.IVA / C.F. 02835910023 · Contatti: admin@warptechlab.com

Storia in 10 fonti

Copilot 'SearchLeak' Attack Allows 1-Click Data Theft

The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.

Raccontata da

bleepingcomputer.com

thehackernews.com

darkreading.com

arstechnica.com

cryptobriefing.com

cybersecurity360.it

venturebeat.com

Confronto fonti

6 prospettive sulla stessa storia

AI · summaries

darkreading.comStai leggendo1 mese fa

Copilot 'SearchLeak' Attack Allows 1-Click Data Theft

The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.

Timeline cronologica

lunedì 15 giugno 2026·bleepingcomputer.com
New attack turned Microsoft 365 Copilot into 1-click data theft tool
A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint…
lunedì 15 giugno 2026·thehackernews.com
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
Microsoft fixed a critical Copilot Enterprise Search flaw that could expose emails, calendars, and indexed files through one trusted link.

bleepingcomputer.com

1 mese fa

New attack turned Microsoft 365 Copilot into 1-click data theft tool

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a specially crafted URL.

Leggi questa versione → originale

arstechnica.com1 mese fa

Critical Copilot vulnerability allowed hackers to seal 2FA code from users

SearchLeak exploit shows why the industry's approach to LLM security fails over and over.

Leggi questa versione → originale

thehackernews.com1 mese fa

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

Microsoft fixed a critical Copilot Enterprise Search flaw that could expose emails, calendars, and indexed files through one trusted link.

Leggi questa versione → originale

thenextweb.com1 mese fa

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.

Leggi questa versione → originale

mashable.com1 mese fa

This Copilot vulnerability could expose emails, 2FA codes, and other sensitive data

This sneaky attack tricks Microsoft's AI assistant to hand over your data.

Leggi questa versione → originale

lunedì 15 giugno 2026·

thenextweb.com

A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.

Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.

lunedì 15 giugno 2026·

darkreading.com

Copilot 'SearchLeak' Attack Allows 1-Click Data Theft

The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.

martedì 16 giugno 2026·

arstechnica.com

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

SearchLeak exploit shows why the industry's approach to LLM security fails over and over.

martedì 16 giugno 2026·

arstechnica.com

Critical Copilot vulnerability allowed hackers to seal 2FA code from users

SearchLeak exploit shows why the industry's approach to LLM security fails over and over.

martedì 16 giugno 2026·

cryptobriefing.com

Microsoft patches critical vulnerability in M365 Copilot that allowed silent data theft

Microsoft fixed CVE-2025-32711, a critical zero-click vulnerability in M365 Copilot that allowed silent exfiltration of emails, 2FA codes, and documents via

martedì 16 giugno 2026·

mashable.com

This Copilot vulnerability could expose emails, 2FA codes, and other sensitive data

This sneaky attack tricks Microsoft's AI assistant to hand over your data.

mercoledì 17 giugno 2026·

ilsoftware.it

Falla critica in Microsoft Copilot esponeva codici di autenticazione e dati aziendali

SearchLeak mostra come Microsoft 365 Copilot potesse essere usato per rubare email, codici MFA e documenti aziendali.

mercoledì 17 giugno 2026·

cybersecurity360.it

SearchLeak apre la strada al furto dati su Microsoft 365 Copilot

La vulnerabilità SearchLeak dimostra come la combinazione di prompt injection, race condition e SSRF possa trasformare Microsoft 365 Copilot in uno strumento involontario di…

giovedì 18 giugno 2026·

venturebeat.com

Copilot, LiteLLM and the AI trust boundary gap

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a CVE, a verify command, and a fix.