Closing The Enterprise AI Security Gap: From Blind Spots To Stronger Defenses
AI-generated summary EchoLeak was a Microsoft 365 Copilot vulnerability disclosed in June 2025 that allowed a crafted email to trigger data exfiltration without requiring the victim to click a malicious link. Microsoft assigned the vulnerability a CVSS severity score of 9.3 while NIST rated it 7.5, and Microsoft patched it with no reported evidence of exploitation in the wild.