{
 "id": "AIR-2026-0356",
 "slug": "echoleak-zero-click-prompt-injection-on-m365-copilot",
 "title": "EchoLeak Zero-Click Prompt Injection on M365 Copilot",
 "summary": "Researchers uncovered a zero-click prompt injection vulnerability in Microsoft 365 Copilot exploiting RAG context. Malicious emails triggered unauthorized data retrieval and subsequent exfiltration without user interaction.",
 "type": "attack_on_ai",
 "categories": [
  "prompt_injection",
  "agent_hijack",
  "data_leak"
 ],
 "severity": 1,
 "targets": [
  "Microsoft"
 ],
 "products": [
  "Microsoft 365 Copilot"
 ],
 "incident_date": "2025-05",
 "incident_date_precision": "month",
 "first_reported": "2026-06-30",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0059",
   "publisher": "MITRE ATLAS",
   "title": "EchoLeak: Zero-Click Prompt Injection Targeting M365 Copilot for Data Exfiltration",
   "published_at": "2026-06-30"
  },
  {
   "url": "https://arxiv.org/abs/2509.10540",
   "publisher": "arXiv",
   "title": "EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System",
   "published_at": "2026-06-30"
  },
  {
   "url": "https://cve.org/CVERecord?id=CVE-2025-32711",
   "publisher": "cve.org",
   "title": "CVE-2025-32711",
   "published_at": "2026-06-30"
  },
  {
   "url": "https://catonetworks.com/blog/breaking-down-echoleak",
   "publisher": "catonetworks.com",
   "title": "Breaking down 'EchoLeak', the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot",
   "published_at": "2026-06-30"
  }
 ],
 "source_count": 4,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "echoleak",
  "prompt-injection",
  "m365-copilot",
  "rag"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}