๐ข๐ป๐ฒ ๐๐บ๐ฎ๐ถ๐น. ๐ญ๐ฒ๐ฟ๐ผ ๐๐น๐ถ๐ฐ๐ธ๐. ๐ง๐ผ๐๐ฎ๐น ๐๐ฎ๐๐ฎ ๐๐ฒ๐ฎ๐ธ.
Yes, itโs real.
A new attack called EchoLeak just changed how we think about AI security.
No clicks. No downloads.
Just an email in your inbox.
And Copilot does the rest:
It scans it.
Follows hidden instructions.
And leaks your data silently.
This is the first zero-click attack on Microsoft 365 Copilot.
๐๐ ๐๐๐ฒ๐ ๐๐โ๐ ๐ฏ๐ฒ๐๐ ๐๐ธ๐ถ๐น๐นโ๐๐ป๐ฑ๐ฒ๐ฟ๐๐๐ฎ๐ป๐ฑ๐ถ๐ป๐ด ๐ฐ๐ผ๐ป๐๐ฒ๐
๐โ๐ฎ๐ด๐ฎ๐ถ๐ป๐๐ ๐ถ๐๐๐ฒ๐น๐ณ.
๐ช๐ต๐ I๐ M๐ฎ๐๐๐ฒ๐ฟ๐:
- ๐ง Copilot can read your chats, files, Teams, OneDrive
- ๐ต๏ธ A hacker email tricks it into sending that data out
- ๐ Traditional security? Useless here
- ๐งจ Even DLP can break Copilotโs features
If you work in banking, healthcare, or defense โ this is your wake-up call.
๐ก Every AI agent in your business is now a potential leak.
โ ๐ก๐ฒ๐ ๐ฅ๐๐น๐ฒ ๐ณ๐ผ๐ฟ ๐๐๐ฆ๐ข๐:
Trust, but verify.
And NEVER let AI read your inbox without real safeguards.