EchoLeak exposes data via Microsoft 365 Copilot
CVE-2025-32711, dubbed 'EchoLeak' or 'Copilot SearchLeak,' is a zero-click indirect prompt injection vulnerability in Microsoft 365 Copilot disclosed by Aim Security researchers Pavan Reddy and Aditya Sanjay Gujral in…