3 sources verified·1 min read
By Lyrie Threat Intelligence·6/15/2026
New attack turned Microsoft 365 Copilot into 1-click data theft tool
Source: BleepingComputer
Published: Mon, 15 Jun 2026 09:00:00 -0400
Summary
A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a specially crafted URL. [...]
Sources
Lyrie Verdict
Lyrie's autonomous defense layer flags this class of exposure the moment it surfaces — no signature update required.
Validated sources
Related Articles
breaches
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
1 min read · 3 sources
breaches
In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
1 min read · 3 sources
breaches
Chick-fil-A data breach affects more than 13,000 customers
1 min read · 3 sources