A single click on a Microsoft link could have drained your inbox. Here’s how SearchLeak worked.

Security researchers at Varonis Threat Labs have disclosed a vulnerability chain in Microsoft 365 Copilot Enterprise Search that could have let an attacker steal emails, calendar entries, and indexed files with a single click. The attack, which Varonis calls SearchLeak, worked through a crafted URL

Related Stories

Anthropic Faces Backlash Over Claude Max Usage Limits Restrictions

Seattle has been using AI to listen to every 911 medical call since 2023. Nobody was told.

Java’s biggest language change in a decade is finally landing. It took 197,000 lines of code.

📰

SpaceX Takes a Giant Leap into Public Markets with Its Historic IPO