Data Leak in Microsoft Copilot: Emails Exfiltrated via Hidden Mermaid Diagram

A novel vulnerability was discovered in Microsoft 365 Copilot that permitted covert exfiltration of user data via an innocuous-looking Mermaid flowchart. The flaw lay in Copilot’s handling of a specially crafted document: the assistant...