Opening SecureFlowSearchLeak: One-Click Data Exfiltration via Microsoft 365 Copilot
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

Varonis Threat Labs aidefend-sf0002

SearchLeak: One-Click Data Exfiltration via Microsoft 365 Copilot

  • Copilot & SaaS
  • RAG & Knowledge Systems
  • Autonomous Agents
  • Data Exfiltration

A validated research flow showing how a crafted Microsoft 365 Copilot Search URL can turn a q parameter into prompt instructions, search user-accessible Microsoft 365 data, stream a data-bearing image tag, and use an allowlisted Bing image fetch path to expose data.

Mapped threat techniques

Source

Updated