HomeAI · summaries
Storia in 7 fonti
SearchLeak apre la strada al furto dati su Microsoft 365 Copilot
La vulnerabilità SearchLeak dimostra come la combinazione di prompt injection, race condition e SSRF possa trasformare Microsoft 365 Copilot in uno strumento involontario di esfiltrazione dati. Un episodio che conferma come la sicurezza dell’AI dipenda anche da integrazioni, autorizzazioni e governance dei dati
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
bleepingcomputer.com
New attack turned Microsoft 365 Copilot into 1-click data theft tool
A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint…
- ·
thehackernews.com
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
Microsoft fixed a critical Copilot Enterprise Search flaw that could expose emails, calendars, and indexed files through one trusted link.
- ·
thenextweb.com
A single click on a Microsoft link could have drained your inbox. Here's how SearchLeak worked.
Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.
- ·
darkreading.com
Copilot 'SearchLeak' Attack Allows 1-Click Data Theft
The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.
- ·
arstechnica.com
Critical Copilot vulnerability allowed hackers to seal 2FA code from users
SearchLeak exploit shows why the industry's approach to LLM security fails over and over.
- ·
Critical Copilot vulnerability allowed hackers to steal 2FA code from users
SearchLeak exploit shows why the industry's approach to LLM security fails over and over.
- ·
ilsoftware.it
Falla critica in Microsoft Copilot esponeva codici di autenticazione e dati aziendali
SearchLeak mostra come Microsoft 365 Copilot potesse essere usato per rubare email, codici MFA e documenti aziendali.
- ·
cybersecurity360.it
SearchLeak apre la strada al furto dati su Microsoft 365 Copilot
La vulnerabilità SearchLeak dimostra come la combinazione di prompt injection, race condition e SSRF possa trasformare Microsoft 365 Copilot in uno strumento involontario di…