Varonis Threat Labs just turned M365 Copilot Enterprise into a one-click data exfiltration weapon.
They called it SearchLeak. CVE-2026-42824.
The attack chain is three moves: parameter-to-prompt injection through the URL, an HTML rendering race condition before the sanitizer kicks in, and a CSP by...
Live Feed
Enterprise AI Impact
How AI is reshaping enterprises — layoffs, breaches, budgets, and who is winning.
Enterprise AI Impact — filtered for signal, not noise
The AI briefing CTOs read before their morning meeting
3 minutes. Zero fluff. Only what moves the needle.
$5/mo — your cheapest competitive edge
Topics
Feed
Advertisement
Start a Discussion