
Copilot Leak: Zero-Click AI Data Theft
Summary A newly discovered vulnerability in Microsoft 365 Copilot, dubbed “EchoLeak,” allowed attackers to steal sensitive corporate data via email without any user interaction. This zero-click exploit, patched by Microsoft in May 2025, highlights the […]