Home/AI Incident Database/EchoLeak: zero-click exfiltration from Microsoft 365 Copilot through a crafted email
EchoLeak: zero-click exfiltration from Microsoft 365 Copilot through a crafted email
An email containing instructions phrased for the recipient bypassed Copilot's injection classifier, was retrieved into context when the user asked an unrelated question, and caused Copilot to leak sensitive data through an image link to an attacker domain that Microsoft's own services would fetch.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.