1 incident10 OWASP4 ATLAS

Index

Filter incidents by category, OWASP item, ATLAS technique or threat level. Several picks in one group mean "or"; picks across groups mean "and". Items at zero have not been covered yet.

EchoLeak: Leaking data from Microsoft 365 Copilot with a single email

Aim Labs showed that M365 Copilot could follow hidden instructions in an incoming email and carry internal data out of the organisation without the user clicking anything. Microsoft fixed it server-side.

Sep 27, 2026CVE-2025-32711

#copilot
#zero-click
#rag
#markdown
LLM01
LLM02
LLM05
AML.T0051.001
AML.T0068
AML.T0057
AML.T0077