Aim Security researchers found a zero-click vulnerability in Microsoft 365 Copilot that could have been exploited to have AI tools like RAG and AI agents hand over sensitive corporate data to attackers simply by issuing a request for the information in a specially worded email. Microsoft fixed the security flaw.

The post Zero-Click Flaw in Microsoft Copilot Illustrates AI Agent, RAG Risks appeared first on Security Boulevard.

Jeffrey Burt

Source: Security Boulevard
Source Link: https://securityboulevard.com/2025/06/zero-click-flaw-in-microsoft-copilot-illustrates-ai-agent-rag-risks/?utm_source=rss&utm_medium=rss&utm_campaign=zero-click-flaw-in-microsoft-copilot-illustrates-ai-agent-rag-risks