
A new cyber threat named EchoLeak highlights vulnerabilities in artificial intelligence systems being utilized by major platforms such as Microsoft 365 Copilot. This alarming development exposes sensitive data without requiring any user interaction, establishing a novel attack technique characterized as a “zero-click” AI vulnerability. The issue has been assigned the CVE identifier CVE-2025-32711, boasting a significant CVSS score of 9.3.