Varonis Threat Labs discovered a three-stage vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise Search that allows attackers to exfiltrate sensitive data with a single click. Th…
Security researchers at Varonis Threat Labs disclosed a vulnerability chain in Microsoft 365 Copilot Enterprise Search, dubbed SearchLeak, that could allow attackers to steal emails, calendar data, an…
Varonis Threat Labs disclosed a critical one-click data-exfiltration vulnerability in Microsoft 365 Copilot Enterprise Search, tracked as CVE-2026-42824. The attack chains a parameter-to-prompt inject…
A critical vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a sp…