rag engine security

ai-security

EchoLeak: Zero-Click AI Vulnerability Exposed M365 Copilot Data

Critical EchoLeak zero-click AI vulnerability in Microsoft 365 Copilot (CVE-2025-32711) allowed sensitive data exfiltration without user interaction. Learn how it worked and Microsoft's response.