Complete News, Your Way.
Published loading...Updated

Copilot Vision Just Launched on Windows — Here’s What It Actually Does

  • Researchers at Aim Labs discovered a critical zero-click vulnerability called EchoLeak in Microsoft 365 Copilot, revealed in January 2025 with a fix deployed in May 2025.
  • The flaw resulted from a fundamental design issue where a malicious email with hidden prompt injection could trick Copilot into leaking sensitive data without user action.
  • EchoLeak could expose internal chat histories, documents, and emails via Microsoft Teams and SharePoint URLs, bypassing existing protections and representing a new class of AI security risks.
  • Microsoft acknowledged the issue, assigned CVE-2025-32711, coordinated with Aim Labs for five months, fully addressed the vulnerability server-side, and stated no customers were affected.
  • This incident highlights growing AI security challenges, emphasizing the need for stronger prompt filters, post-processing, and rethinking AI agent design to protect sensitive enterprise data.
Insights by Ground AI
Does this summary seem wrong?
Podcasts & Opinions

28 Articles

All
Left
Center
4
Right
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 100% of the sources are Center
100% Center
Factuality

To view factuality data please Upgrade to Premium

Ownership

To view ownership data please Upgrade to Vantage

winfuture.de broke the news in on Tuesday, June 10, 2025.
Sources are mostly out of (0)