> New attack turned Microsoft 365 Copilot into 1-click data theft tool
[AUTHOR: Bill Toulas]
[DATE: 15/06/2026 13:00]
[LANGUAGE: EN]
A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a specially crafted URL. [...]