What security vulnerabilities have researchers found in recent enterprise rollouts of Microsoft Copilot and how can we mitigate them?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What security vulnerabilities have researchers found in recent enterprise rollouts of Microsoft Copilot and how can we mitigate them?
1 real search · 1 real-search pass
Microsoft 365 Copilot enterprise security vulnerabilities researchers EchoLeak CVE-2025-32711 prompt injection oversharing 2026Google ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 1 queries…
Searches and sources
ChatGPT1 real searches · gpt-6
Microsoft 365 Copilot enterprise security vulnerabilities researchers EchoLeak CVE-2025-32711 prompt injection oversharing 2026 Google ↗
- Microsoft 365 Copilot ‘zero-click’ vulnerability enabled data exfiltration | news · scworld.com
- MSRC_CVE-2025-32711 · vulnerability.circl.lu
- EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System · arxiv.org
- SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon · varonis.com
- One-Click Microsoft 365 Copilot SearchLeak Vulnerability Enables Cross-Session Data Exfiltration Critical AI Prompt Injection and Information Leakage Flaw (CVE-2026-42824) · cirt.gov.jm
- CSAI Foundation · labs.cloudsecurityalliance.org
- NVD · nvd.nist.gov
- MSRC_CVE-2026-21520 · vulnerability.circl.lu
- Microsoft patched a Copilot Studio prompt injection. The data exfiltrated anyway · venturebeat.com
- Copirate 365: M365 Copilot Command Injection at Scale · labs.cloudsecurityalliance.org
- Copilot controls security and governance · learn.microsoft.com
- Configure a secure and governed foundation for Microsoft Copilot · learn.microsoft.com
- Detecting and mitigating common agent misconfigurations · microsoft.com
- Enable external threat detection and protection for Copilot Studio custom agents (preview) - Microsoft Copilot Studio · learn.microsoft.com
- Securing AI agents: When AI tools move from reading to acting · microsoft.com
- Microsoft Purview documentation · learn.microsoft.com
- SharePoint documentation · learn.microsoft.com
- Copilot Studio documentation · learn.microsoft.com
- how-microsoft-defends-against-indirect-prompt-injection-attacks · microsoft.com
- Microsoft Copilot prompt defense in depth · learn.microsoft.com
- Documentation · learn.microsoft.com
- Documentation · learn.microsoft.com
- Audit documentation · learn.microsoft.com