SearchLeak enables one-click data siphon from M365 Copilot; Microsoft patches CVE‑2026‑42824
Varonis Threat Labs discovered SearchLeak, a three‑stage chain in M365 Copilot Enterprise Search that turns a malicious link into a silent data exfiltration tool, stealing emails, files, and calendar items with a single click. Microsoft assigned it CVE‑2026‑42824, rated critical, and has released a patch.