Archive · 12 Jun 2025
Microsoft Copilot Vulnerability: Zero-Click Exploit Exposed Data
Imagine a new type of computer bug called EchoLeak that affects the AI assistant in Microsoft's 365 Copilot.
This bug let hackers secretly steal your private information just by sending a sneaky email.
When Copilot read the email, it could be tricked into giving away your data.
It's like a secret code in an email that tells Copilot to share sensitive information.
Microsoft fixed this problem so no one could be hurt, but it shows how we need to be careful with AI and protect our info.
Researchers discovered a zero-click vulnerability, named EchoLeak, in Microsoft 365 Copilot.
The flaw could have allowed hackers to steal sensitive user data through hidden prompts in emails.
The vulnerability was fixed by Microsoft server-side in May 2025, with no customer action needed.
EchoLeak is believed to be the first zero-click vulnerability targeting an LLM-based assistant.
The discovery highlights the emerging threat of LLM Scope Violations.
- Who
- Researchers at Aim Labs discovered the vulnerability, and it affected users of Microsoft 365 Copilot.
- What
- A zero-click vulnerability, named EchoLeak, in Microsoft 365 Copilot was discovered that could expose user data.
- When
- Discovered in January 2025 and fixed in May 2025.
- Where
- The vulnerability affected Microsoft 365 Copilot, used within applications like Word, Excel, and Outlook.
- Why
- The vulnerability allowed for potential data breaches due to hidden prompts within emails exploiting Copilot's Retrieval-Augmented Generation (RAG) functionality.
Researcher Concerns
Microsoft's Response
Security vs. Public Perception
Researcher Concerns
Researchers emphasized the importance of addressing new security threats associated with LLMs like Microsoft Copilot.
Microsoft's Response
Microsoft reassured that the issue was resolved and customers weren't impacted.
- Vulnerability Name
- EchoLeak
- Affected Software
- Microsoft 365 Copilot
- Type of Exploit
- Zero-click
- Discovery Date
- January 2025
- Fix Date
- May 2025
- Vulnerability ID
- CVE-2025-32711
- Impact
- Potential sensitive data leaks