Incidents on irzubal · AI security incident analysishttps://irzubal.com/en/incidents/Recent content in Incidents on irzubal · AI security incident analysisHugoen-USSun, 27 Sep 2026 00:00:00 +0300EchoLeak: Leaking data from Microsoft 365 Copilot with a single emailhttps://irzubal.com/en/incidents/echoleak-m365-copilot/Sun, 27 Sep 2026 00:00:00 +0300https://irzubal.com/en/incidents/echoleak-m365-copilot/Aim Labs showed that M365 Copilot could follow hidden instructions in an incoming email and carry internal data out of the organisation without the user clicking anything. Microsoft fixed it server-side.