Unverified50% confidenceEventExact time
EchoLeak (CVE-2025-32711, CVSS 9.3) is the first publicly documented case of prompt injection stealing data with zero user interaction, affecting Microsoft 365 Copilot.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/16/2026
First Seen
Valid until: 1/14/2027
Sources
Related Entities
Related Claims
UnverifiedIf a logging system fails to mask payload fields or lacks RBAC access controls, it may introduce a risk of data leakage.57% similarUnverified账号轮换工具通过拦截API返回的429状态码或特定错误信息来检测账号触发限额，然后自动替换浏览器中的身份凭证53% similarUnverifiedDatasette默认使用Referrer-Policy: no-referrer这一最严格的隐私策略53% similarUnverifiedOperations that bypass the callback layer will appear in Stripe event logs, Microsoft 365 audit logs, or AWS CloudTrail.53% similarUnverifiedImplicit caching is enabled by default for prompts above 4,096 tokens, with a 95% discount on cached input.52% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1047859API
curl https://kongchang.com/api/v1/knowledge/claims/1047859MCP
get_claim(id=1047859)