Microsoft 365 Copilot Enterprise

Researchers at security firm Varonis exploited Microsoft 365 Copilot Enterprise by tricking the AI into revealing an undocumented parameter (?autorun=1) that bypassed user consent, allowing data exfil…

Varonis Threat Labs disclosed SearchLeak, a three-stage vulnerability chain in Microsoft 365 Copilot Enterprise that can exfiltrate emails, MFA codes, calendar items, SharePoint and OneDrive files via…

Varonis Threat Labs disclosed a critical vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise that could allow attackers to exfiltrate emails, MFA codes, and files via a one-click…