Know how assistants can leak data through rendered content
A researcher showed indirect prompt injection could make M365 Copilot hide data in a clickable Mermaid diagram that sent it to an attacker. Microsoft fixed it.
Microsoft 365 Copilot: real stories
2 items
Understand zero-click leaks in AI assistants
Aim Security found a crafted email could make M365 Copilot leak data from the user's context without any click (CVE-2025-32711). Microsoft fixed it server-side.