Security researchers have uncovered the first-ever zero-click vulnerability in an AI agent, targeting Microsoft 365 Copilot and potentially exposing sensitive organizational data through a sophisticated attack chain dubbed “EchoLeak.” The critical flaw, assigned CVE-2025-32711 with a CVSS score of 9.3, represents a groundbreaking discovery in AI security that required no user interaction to execute. Discovered […]

The post 0-Click Vulnerability in Microsoft 365 Copilot Exposes Sensitive Data via Teams appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anupriya

Source: gbHackers
Source Link: https://gbhackers.com/vulnerability-in-microsoft-365-copilot/