Tag
echoleak
Safeguard articles tagged "echoleak" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Security News
EchoLeak: The First Real-World Zero-Click Prompt Injection in a Production LLM
A single email, never opened or clicked, was enough to exfiltrate data from Microsoft 365 Copilot. CVE-2025-32711 shows why zero-click prompt injection is a categorically different threat than phishing-style attacks.
Sep 16, 20266 min read
AI Security
EchoLeak (CVE-2025-32711): The First Zero-Click LLM Exfiltration in Production
Aim Security's CVE-2025-32711 exfiltrated Microsoft 365 Copilot data via a single crafted email. The XPIA classifier failed, CSP let attackers through, and CVSS 9.3 followed.
May 14, 20266 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.