This Copilot vulnerability could expose emails, 2FA codes, and other sensitive data

This sneaky attack tricks Microsoft's AI assistant to hand over your data.
The Next Web

A single click on a Microsoft link could have drained your inbox. Here’s how SearchLeak worked.

Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.

SearchLeak: Critical Microsoft 365 Copilot Flaw Enabled One-Click Theft of Emails, Security Codes and Enterprise Data

Researchers uncovered SearchLeak, a critical Microsoft 365 Copilot flaw that could let attackers steal emails, OTPs and ...

Football World Cup: FIFA streaming was easily hackable

An IT researcher could have manipulated FIFA's live streaming for the 2026 Football World Cup due to a lack of proper ...

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the ...
CNET on MSN

I Turned Off All Antivirus Protection for a Week. Here's What I Learned

I Turned Off All Antivirus Protection for a Week. Here's What I Learned ...
CPO Magazine

API Vulnerability Could Have Let Attackers Hijack FIFA World Cup Broadcast Streams

A API vulnerability documented by independent security blogger "bobdahacker" created a path to replacing the FIFA World Cup ...

Copilot searched your mailbox. LiteLLM handed out admin keys. Run this 5-check audit before your stack is next

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a ...
HealthcareInfoSecurity

Hacker: 'I Could Have Rickrolled the World Cup'

A white-hat hacker discovered a now-fixed authorization flaw in a FIFA World Cup 2026 platform that allowed users to access a ...

All it took was an ID: the FIFA World Cup broadcast bug Okta says every developer should study

A security researcher registered as a football agent, slipped into FIFA's internal systems, and found she could change what ...

VLC is more than a media player: Hidden features you’re not using fully

Discover hidden VLC Media Player features that let you stream online videos, convert files, use your webcam, improve playback ...
eWeek

$22B Fox-Roku Deal Reshapes Streaming Market

Fox said Monday it will buy Roku for $160 a share in a cash-and-stock deal worth about $22 billion, with closing targeted for the first half of 2027. The merger weds Fox's live-news and sports ...