A critical zero-click vulnerability in Microsoft's Copilot AI assistant, dubbed EchoLeak and tracked as CVE-2025-32711, was recently discovered by researchers at Aim Security. This flaw allowed attackers to exfiltrate sensitive organizational data without any user interaction, posing a...
ai privacy
ai risks
ai securityaimsecurity
copilot controversy
cve-2025-32711
cybersecurity
data breach
data exfiltration
data security
enterprise security
llm vulnerabilities
microsoft 365
microsoft copilot
securitysecurity mitigation
vulnerability
zero-click attack
Here are the key details about the “EchoLeak” zero-click exploit targeting Microsoft 365 Copilot as documented by Aim Security, according to the SiliconANGLE article (June 11, 2025):
What is EchoLeak?
EchoLeak is the first publicly known zero-click AI vulnerability.
It specifically affected...
ai security
ai vulnerabilities
aimsecurity
attack surface
copilot
cyber threats
cybersecurity
data exfiltration
data leakage
generative ai risks
hacking
llm security
microsoft 365
microsoft security
prompt injection
security patch
siliconangle
vulnerabilities
zero-click attack