Zero-click AI data leak flaw uncovered in Microsoft 365 Copilot A new attack dubbed \'EchoLeak\' is the first known zero-click vulnerability that enables attackers to exfiltrate sensitive from a user\'s context without interaction.