New attack turned Microsoft 365 Copilot into 1-click data theft tool
A critical vulnerability identified as SearchLeak allowed unauthorized access to sensitive data within Microsoft 365 Copilot.
🌍 Cross-language spread
This story first appeared in 🇩🇪 German coverage — 4.1 hours before PULSE detected it in English news.
Detected by matching proper nouns and figures that survive translation. Times reflect when each edition's coverage was first indexed.
Velocity
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
The brief
A flaw termed SearchLeak enabled attackers to execute one-click data theft through Microsoft 365 Copilot. The vulnerability allowed for the extraction of emails, files, and multi-factor authentication codes.
Coverage from The Hacker News, BleepingComputer, and The420.in highlights that the flaw impacted the functionality of the 365 Copilot suite. Reports confirm that Microsoft has issued a patch to address the security vulnerability.
Future developments depend on user implementation of the provided patch. Coverage does not yet specify whether unauthorized data exfiltration occurred before the security update was deployed.
Synthesized by PULSE from the headlines below under a strict no-invention contract. Updated 149d ago.
Quick answers
What was the name of the security flaw?
The vulnerability is identified as SearchLeak.
What information could be accessed using the flaw?
Attackers could potentially access emails, files, and MFA codes.
Has the issue been resolved?
Yes, Microsoft has patched the critical flaw in 365 Copilot.
Coverage (3)
- Microsoft Patches Critical SearchLeak Flaw in 365 Copilot The420.in · 151d ago
- One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes The Hacker News · 151d ago
- New attack turned Microsoft 365 Copilot into 1-click data theft tool BleepingComputer · 151d ago
Topics
Related trends
Microsoft 365 Outage Improves Into Friday—Governments, Airlines Report Disruptions
A massive global Microsoft 365 outage enters its second day as governments and airlines grapple with sweeping technological disruptions.
Microsoft's $5,899 AI Laptop Is Here, and You Should Absolutely Not Buy It
Microsoft's new Surface Laptop Ultra faces sharp criticism across recent technology coverage.
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
OpenAI launches new security products while warning organizations that they face failure without adoption.
FBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
Federal authorities seize over $1.2 billion in cryptocurrency following a massive $6.3 billion hack linked to North Korea.
Cerebras surges 17% after beating on quarterly revenue and announcing Microsoft deal
Cerebras shares jump 17% after the AI chipmaker beats Q3 revenue estimates, raises its full-year forecast, and unveils a strategic Microsoft cloud partnership.
Microsoft 365 Outage Continues: Tech Giant Has No Timeline For Recovery, Says It’s ‘Deeply Sorry’
Microsoft faces a worldwide Outlook outage with no recovery timeline as the company apologizes to affected users.