Microsoft Copilot targeted in first “zero-click” attack on an AI agent - what you need to know

Generative ai business use.

---

• Security researchers Aim Labs discovered an LLM Scope Violation flaw in Microsoft 365 Copilot
• The critical-severity bug allows threat actors to exfiltrate sensitive corporate data by sending an email
• Microsoft says it has fixed the issue server-side, but users should be on guard