Lyrie
Breach Report
3 sources verified·1 min read
By Lyrie Threat Intelligence·6/15/2026

New attack turned Microsoft 365 Copilot into 1-click data theft tool

Source: BleepingComputer

Published: Mon, 15 Jun 2026 09:00:00 -0400

Summary

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a specially crafted URL. [...]

Sources

Lyrie Verdict

Lyrie's autonomous defense layer flags this class of exposure the moment it surfaces — no signature update required.