Copilot Vision Just Launched on Windows — Here’s What It Actually Does
- Researchers at Aim Labs discovered a critical zero-click vulnerability called EchoLeak in Microsoft 365 Copilot, revealed in January 2025 with a fix deployed in May 2025.
- The flaw resulted from a fundamental design issue where a malicious email with hidden prompt injection could trick Copilot into leaking sensitive data without user action.
- EchoLeak could expose internal chat histories, documents, and emails via Microsoft Teams and SharePoint URLs, bypassing existing protections and representing a new class of AI security risks.
- Microsoft acknowledged the issue, assigned CVE-2025-32711, coordinated with Aim Labs for five months, fully addressed the vulnerability server-side, and stated no customers were affected.
- This incident highlights growing AI security challenges, emphasizing the need for stronger prompt filters, post-processing, and rethinking AI agent design to protect sensitive enterprise data.
28 Articles
28 Articles
Hackers Could Steal Data From Microsoft 365 Copilot Without Phishing Or Malware, Says AI Startup — 'EchoLeak' Flaw Took 5 Months To Fix - Alphabet (NASDAQ:GOOG), Alphabet (NASDAQ:GOOGL)
A critical security flaw was discovered in Microsoft (NASDAQ: MSFT) 365 Copilot, an AI tool integrated into various Microsoft Office applications. This vulnerability could potentially lead to attacks on sensitive data.
New Microsoft Copilot flaw signals broader risk of AI agents being hacked
Microsoft 365 Copilot, the AI tool built into Microsoft Office workplace applications including Word, Excel, Outlook, PowerPoint, and Teams, harbored a critical security flaw that, according to researchers, signals a broader risk of AI agents being hacked. The flaw, revealed today by AI security startup Aim Security and shared exclusively in advance with Fortune, is […] The post New Microsoft Copilot flaw signals broader risk of AI agents being …
Coverage Details
Bias Distribution
- 100% of the sources are Center
To view factuality data please Upgrade to Premium