New attack turned Microsoft 365 Copilot into 1-click data theft tool
A critical vulnerability identified as SearchLeak allowed unauthorized access to sensitive data within Microsoft 365 Copilot.
🌍 Cross-language spread
This story first appeared in 🇩🇪 German coverage — 4.1 hours before PULSE detected it in English news.
Detected by matching proper nouns and figures that survive translation. Times reflect when each edition's coverage was first indexed.
Velocity
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
The brief
A flaw termed SearchLeak enabled attackers to execute one-click data theft through Microsoft 365 Copilot. The vulnerability allowed for the extraction of emails, files, and multi-factor authentication codes.
Coverage from The Hacker News, BleepingComputer, and The420.in highlights that the flaw impacted the functionality of the 365 Copilot suite. Reports confirm that Microsoft has issued a patch to address the security vulnerability.
Future developments depend on user implementation of the provided patch. Coverage does not yet specify whether unauthorized data exfiltration occurred before the security update was deployed.
Synthesized by PULSE from the headlines below under a strict no-invention contract. Updated 113d ago.
Quick answers
What was the name of the security flaw?
The vulnerability is identified as SearchLeak.
What information could be accessed using the flaw?
Attackers could potentially access emails, files, and MFA codes.
Has the issue been resolved?
Yes, Microsoft has patched the critical flaw in 365 Copilot.
Coverage (3)
- Microsoft Patches Critical SearchLeak Flaw in 365 Copilot The420.in · 115d ago
- One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes The Hacker News · 115d ago
- New attack turned Microsoft 365 Copilot into 1-click data theft tool BleepingComputer · 115d ago
Topics
Related trends
The Trump administration is suspending Microsoft from a green card program, alleging fraud
2 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.
US freezes Microsoft, Adobe, Infosys green-card applications over alleged fraud
1 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.
Trump disclosed millions in new trades in SpaceX and Microsoft. Today, he's giving medals to their CEOs.
1 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.
US suspends Microsoft, major IT firms from key green card program
2 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.
Vance suspends Microsoft, others from foreign workers applying for green cards, accuses company of visa 'abuse
5 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.
Trump's foreign worker crackdown comes for Microsoft, Adobe, IT firms
The Trump administration has suspended major tech firms, including Microsoft and Adobe, from applying for permanent residency for skilled foreign workers.