Skip to main content
newspals
Topics
Concepts
Editors
Newsletter
English
Microsoft 365 Copilot — Concepts | NewsPals
Concepts
·
Microsoft 365 Copilot
the lore behind the feed
Microsoft 365 Copilot
The stories that keep pulling this idea back into the feed.
2 stories
In the feed
cybersecurity
EchoLeak (CVE-2025-32711): The Zero-Click Vulnerability That Reveals a Flaw in RAG-Based AI Itself
Microsoft patched Copilot's EchoLeak flaw in May 2026, but the prompt-injection mechanism it exploited is architectural , and lives in every RAG-based AI assistant you deploy.
Also vibing
CVE-2025-32711
Data Exfiltration
Prompt Injection
RAG Security
Zero-Click Vulnerability