«Critical Copilot vulnerability allowed hackers to steal 2FA code from users:
SearchLeak exploit shows why the industry’s approach to LLM security fails over and over.»

WTF: What is intelligent now and how to tackle what? Certainly not the usual popular AI for IT security.

☠️ https://arstechnica.com/security/2026/06/critical-copilot-vulnerability-allowed-hackers-to-seal-2fa-code-from-users/

#microsoft #2fa #ai #wtf #llmsecurity #ms #llm #searchleak #fail #itsec #aislop #itsecurity #onlinesecurity #copilot

https://winbuzzer.com/2026/06/16/microsoft-patches-copilot-searchleak-data-theft-flaw-xcxwbn/

Microsoft has patched a Copilot flaw after researchers showed a one-click chain that could expose two-factor codes and enterprise data via search.

#AI #SearchLeak #Microsoft365Copilot #Microsoft #Microsoft365 #MicrosoftCopilot #Varonis #CVE202642824 #Cybersecurity

🚨 NEWS: Vulnerabilità Critica di Copilot Espone i Codici 2FA: Perché la Sicurezza delle AI è Ancora Fragile

Ecco i punti chiave in breve:
💡 Una scoperta recente ha scosso il mondo della cybersecurity. Un exploit denominato SearchLeak ha dimostrato come una vulnerabilità critica in GitHub Copilot, l'assistente di codifi...

🚀 LINK: https://meteoraweb.com/news/vulnerabilita-critica-di-copilot-espone-i-codici-2fa-perche-la-sicurezza-delle-ai-e-ancora-fragile

#lLM #sicurezzaAI #autenticazione #copilotVulnerabilità #searchLeak

Varonis Threat Labs discovered "SearchLeak," a critical vulnerability (CVE-2026-42824) that allowed attackers to exfiltrate sensitive data—emails, calendar events, and files—from Microsoft 365 Copilot Enterprise environments with just one click. The attack exploited a complex chain involving AI-specific weaknesses and classic web bugs, raising serious questions about AI assistant…

https://www.tpp.blog/1406gzj

#cybersecurity #microsoft365copilot #searchleak

🤖 This post was AI-generated.

KI und Copilot ist sau cool - ein Suchstring in einer URL reicht, um von einem Opfer E-Mails, Adressen, SharePoint-Dokumente, OneDrive-Inhalte etc. aus einer Unternehmensumgebung zu exfiltrieren. #SearchLeak macht es möglich.

https://borncity.com/blog/2026/06/16/searchleak-neuer-kritischer-ein-klick-exploit-fuer-microsoft-copilot/

Microsoft 365 Copilot Exploited in 1-Click Data Theft Attack

A critical vulnerability in Microsoft 365 Copilot Enterprise, known as SearchLeak, could be exploited with just one click to steal sensitive data from mailboxes, OneDrive, and SharePoint. Fortunately, Microsoft has patched the flaw, CVE-2026-42824, and no user action is required to stay safe.

https://osintsights.com/microsoft-365-copilot-exploited-in-1-click-data-theft-attack?utm_source=mastodon&utm_medium=social

#Microsoft365Copilot #Cve202642824 #Searchleak #DataExfiltration #CloudSecurity