CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 434

As cited

Copy frozen at (site build).

vulnerabilities

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Microsoft patched a critical vulnerability in M365 Copilot that allowed attackers to extract two-factor authentication codes and other sensitive data from user emails through prompt injection techniques. Researchers demonstrated that large language models cannot reliably distinguish between legitimate user instructions and malicious directives embedded in third-party content, creating a fundamental security boundary problem. Attackers bypassed Copilot's guardrails by using markup language and HTML tags to trigger unintended web requests that exfiltrated sensitive data to attacker-controlled servers.

Why it matters: If you use Copilot with M365, apply Microsoft's patch immediately to prevent attackers from harvesting authentication codes and credentials from your email.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Microsoft patched a critical vulnerability in M365 Copilot that allowed attackers to extract two-factor authentication codes and other sensitive data from user emails through prompt injection techniques. Researchers demonstrated that large language models cannot reliably distinguish between legitimate user instructions and malicious directives embedded in third-party content, creating a fundamental security boundary problem. Attackers bypassed Copilot's guardrails by using markup language and HTML tags to trigger unintended web requests that exfiltrated sensitive data to attacker-controlled servers.

Why it matters: If you use Copilot with M365, apply Microsoft's patch immediately to prevent attackers from harvesting authentication codes and credentials from your email.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary