{"id":58972,"date":"2025-07-15T00:00:00","date_gmt":"2025-07-15T00:00:00","guid":{"rendered":"urn:uuid:0008ea18-8da5-3582-0cf3-c3b2636c836a"},"modified":"2025-07-15T00:00:00","modified_gmt":"2025-07-15T00:00:00","slug":"preventing-zero-click-ai-threats-insights-from-echoleak","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/preventing-zero-click-ai-threats-insights-from-echoleak\/","title":{"rendered":"Preventing Zero-Click AI Threats: Insights from EchoLeak"},"content":{"rendered":"

<\/p>\n

<\/div>\n

EchoLeak (CVE-2025-32711<\/a>) is a newly identified vulnerability in Microsoft 365 Copilot, made more nefarious by its zero-click nature, meaning it requires no user interaction to succeed. It demonstrates how helpful systems can open the door to entirely new forms of attack\u2014 no malware, no phishing required\u2014just the unquestioning obedience of an AI agent.<\/p>\n

This new threat has even been classified by the team behind the disclosure as a new form of large language model (LLM) exploitation called \u201cScope Violation.\u201d In this entry, we break down these new terms and risks\u2014and how Trend Micro can help users stay ahead, equipped and aware of these tactics, especially when AI assistants aren\u2019t.<\/p>\n

EchoLeak: Weaponizing context<\/span><\/p>\n

EchoLeak highlights how even reliable GenAI capabilities can lead to unforeseen vulnerabilities.<\/p>\n

It exploits Copilot\u2019s ability to process contextual data\u2014such as older emails or messages\u2014to assist users with tasks or queries. In doing so, this function also creates an opening for threat actors to silently extract sensitive user information without user interference.<\/p>\n

How does the attack work?<\/b><\/p>\n

While there are safeguards in place to prevent this sort of exploitation, researchers<\/a> were able to craft a malicious email and trigger conditions to bypass these security measures,instructing the AI assistant to exfiltrate sensitive information by doing the following:<\/p>\n