[H4ckN3ws]One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

A single click on a trusted

This is the hidden content, please

• Sign In
• or
• Sign Up

link could have let an attacker pull emails, calendar details, and indexed files out of

This is the hidden content, please

• Sign In
• or
• Sign Up

365 Copilot Enterprise Search. Researchers at Varonis Threat Labs chained three bugs into a one-click exfiltration path they call SearchLeak. Because the link pointed to a real

This is the hidden content, please

• Sign In
• or
• Sign Up

.com domain, traditional anti-phishing and URL filtering tools were

This is the hidden content, please

• Sign In
• or
• Sign Up