2026年6月18日 13:42 ET 发布 · 更新于 5 个月前 · 1 个来源
Copilot searched your mailbox. LiteLLM handed out admin keys. Run this 5-check audit before your stack is next
VentureBeat
·
原始报道
Two AI tools broke in the same way in the same two weeks, and four research teams proved it. The pattern underneath every disclosure is one sentence: enterprise AI accepts external input with no trust boundary. On June 15, Varonis disclosed SearchLeak (CVE-2026-42824), a proof-of-concept exfiltration chain in Microsoft 365 Copilot Enterprise Search. A victim clicks a crafted microsoft.com URL, Copilot searches their mailbox, and the data leaves through a Bing SSRF. No plugins, no second click, n
原文