CVE-2026-42824

Varonis Threat Labs disclosed a critical one-click data-exfiltration vulnerability in Microsoft 365 Copilot Enterprise Search, tracked as CVE-2026-42824. The attack chains a parameter-to-prompt inject…

A critical vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a sp…