Unverified50% confidenceEventExact time
EchoLeak is a zero-click email injection attack in which the attacker sends an email containing instructions, and Copilot executes the instructions while summarizing the inbox and exfiltrates data through Markdown image links.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/22/2026
First Seen
Valid until: 1/20/2027
Sources
Related Entities
Related Claims
UnverifiedEchoLeak (CVE-2025-32711, CVSS 9.3) is the first publicly documented case of prompt injection stealing data with zero user interaction, affecting Microsoft 365 Copilot.67% similarUnverifiedEach agent's inbox is essentially a file or folder; messages are delivered via a function when sent, and a line of text is appended to a monitored signal file as a signal.61% similarUnverified邮件头注入是一种服务端注入漏洞，当Web应用将用户输入未经过滤拼接进邮件头时，攻击者可通过插入CRLF进行攻击61% similarUnverifiedInbox Zero supports private comments alongside emails and receives reminders via Slack.58% similarUnverifiedAdopting a strategy that separates the envelope sender from the header From address means that even if the display address is noreply, the bounce address at the envelope level can point to a system dedicated to handling bounces.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1085480API
curl https://kongchang.com/api/v1/knowledge/claims/1085480MCP
get_claim(id=1085480)