[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJgzL8kgVp9KU2CY2TqUPl1-B4Pr_jubqx_EWZtcPsIM":3},{"article":4,"iocs":44},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":27,"category":28,"article_tags":31},"7336e734-7b9e-4488-b18f-46f3225c8a78","Copilot 'SearchLeak' Attack Allows 1-Click Data Theft","copilot-searchleak-attack-allows-1-click-data-theft-f159ba","The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.","A critical vulnerability dubbed 'SearchLeak' in Microsoft Copilot has been patched, which allowed attackers to steal data with a single click. The attack exploited prompt injection techniques, leveraging hidden URLs and other variables to trick the AI into revealing sensitive information. This incident highlights a growing class of vulnerabilities targeting AI systems.","Copilot 'SearchLeak' attack allowed 1-click data theft via prompt injection.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fapplication-security\u002Fcopilot-searchleak-attack-1-click-data-theft","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fbltd943e9204f974e51\u002F6a3053a98a78d25c2f29ab90\u002Fleaking_faucet-igorwheeler-Getty-511928310.jpg?width=720&quality=80&disable=upscale","2026-06-15T19:27:48+00:00","2026-06-15T22:00:13.420357+00:00",8,[18,21,24],{"name":19,"type":20},"Copilot","product",{"name":22,"type":23},"Microsoft","vendor",{"name":25,"type":26},"AI prompt-injection","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":11,"name":29,"slug":30},"Vulnerabilities","vulnerabilities",[32,34,39],{"category":33},{"id":27,"icon":11,"name":29,"slug":30},{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":40},{"id":41,"icon":11,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]