
Copilot Had a One-Click Hole Into Company Data
Two chained Microsoft Copilot flaws, dubbed SearchLeak by Varonis, let attackers exfiltrate email, files and app data with no click beyond opening a webpage. Microsoft has patched it, but the pattern has not gone away.










