ECHOLEAK ZERO-CLICK AI ATTACK IN MICROSOFT COPILOT EXPOSES COMPANY DATA

Summary from the TLDR InfoSec newsletter

A new security vulnerability named EchoLeak enables hackers to extract company data from Microsoft 365 Copilot using just one email. This attack deceives the AI into violating its own protocols and divulging confidential information, all without requiring any action from the user. Experts caution that this highlights more significant risks associated with designing and using AI tools.