2025-06 · 2025-Q2
EchoLeak - Microsoft 365 Copilot Zero-Click Prompt Injection
Layer tags: not yet tagged.
Target
Microsoft 365 Copilot
Impact
Zero-click data exfiltration from M365 sessions via crafted email; bypassed XPIA classifier
Root Cause
AI command injection via hidden text, speaker notes, and metadata in documents