One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
Researchers at Varonis Threat Labs chained three bugs into a one-click exfiltration path called SearchLeak that could pull emails, calendar details, and indexed files out of Microsoft 365 Copilot Enterprise Search, assigned CVE-2026-42824 and rated...