www.darkreading.com 6/15/2026, 9:31:59 PM · external

Attackers hijack Microsoft Copilot to leak data CVE-2026-42824

Attackers hijack Microsoft Copilot to leak data CVE-2026-42824
Developing story vulnerability 2 articles tracked
Microsoft Copilot AI vulnerability leaks 2FA codes (CVE-2026-42824)
CyberSIXT Evidence Panel
Primary Source varonis.com
CVE Intel
CISA KEV Not in KEV
Patch Patch Available

THE article discusses the 'SearchLeak' attack identified by Varonis Threat Labs, which exploited a vulnerability in Microsoft's Copilot system, allowing attackers to exfiltrate sensitive user data with minimal user interaction. The attack involved a three-stage process using crafted links to Microsoft 365 Copilot, where malicious prompts could manipulate the AI to retrieve user information, including emails and documents, and send them to an attacker's server.

Microsoft has since patched this vulnerability, classified as CVE-2026-42824. Experts warn that this issue exemplifies broader risks posed by AI-powered enterprise assistants and the need for stronger security measures. User action is not required, but awareness of potential risks in systems that interface external inputs and internal data is crucial.

View Primary Source Via www.darkreading.com

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline