First Known Zero-Click AI Exploit: Microsoft 365 Copilot’s ‘EchoLeak’ Flaw
Image: Sutthiphong/Adobe Stock Security researchers at AIM Security have revealed a serious zero-click vulnerability dubbed “EchoLeak.” The flaw targets the AI-powered Microsoft 365 Copilot, allowing cybercriminals to exfiltrate private data from a user’s organizational environment by simply sending a carefully created email. In a report published this week, AIM Security stated this is the first