Information Security
The latest Information Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Export Windows Recall data via Settings for GDPR compliance and backup
Microsoft’s Recall feature for Windows has sparked significant interest among IT professionals and privacy advocates, offering AI-powered memory capabilities while raising important questions about...
CVE-2025-32711 in Microsoft Copilot enables silent data theft without user clicks.
A newly discovered zero-click vulnerability in Microsoft Copilot, tracked as CVE-2025-32711 and dubbed "EchoL," has sent shockwaves through the cybersecurity community. This critical flaw allows...
Microsoft Secure Boot Vulnerability CVE-2024-28923: What You Need to Know
Microsoft's Secure Boot feature, a critical component of Windows security, has come under scrutiny with the disclosure of CVE-2024-28923. This vulnerability, classified as a "Secure Boot Security...
EchoLeak Vulnerability in Microsoft 365 Copilot: AI Security Risks & Mitigation Strategies
A newly discovered vulnerability in Microsoft 365 Copilot, dubbed "EchoLeak," has sent shockwaves through the enterprise security community in early 2025. This zero-click attack vector exposes...
Microsoft DLP tools shield data from cascading supply chain breaches and Azure outages
The global IT landscape was rocked by a recent catastrophic outage, laying bare just how vulnerable even the most sophisticated digital infrastructures can be to the ripple effects of unforeseen...
EchoLeak zero-click exploit silently siphons Microsoft 365 Copilot data; apply these critical safeguards now.
Microsoft’s rapid integration of AI into its Microsoft 365 Copilot has transformed workplaces, but it also introduces new security risks—particularly the emerging threat of EchoLeak, a zero-click...
Microsoft Outlook's Two-Click Encrypted Email: A Game-Changer for Security in 2025
Microsoft is set to revolutionize email security with a groundbreaking feature coming to Outlook in 2025: two-click encrypted email viewing. This innovation promises to streamline secure...
EchoLeak: How Microsoft 365 Copilot's Zero-Click Vulnerability Threatens Enterprise Data Security
A critical zero-click vulnerability in Microsoft 365 Copilot, dubbed "EchoLeak," sent shockwaves through the cybersecurity community in August 2024. This flaw allowed attackers to bypass all user...
Echoleak Zero-Click AI Attack Exploits Microsoft 365 Copilot, Threatens Enterprise Data
A new cybersecurity threat named Echoleak has emerged, sending shockwaves through the enterprise security landscape. This sophisticated zero-click attack exploits AI systems, particularly those...
EchoLeak: Critical Microsoft Copilot Vulnerability Exposes Enterprise Data
A newly discovered security flaw in Microsoft Copilot, dubbed 'EchoLeak,' has sent shockwaves through the enterprise security community. Researchers at cybersecurity firm Varonis uncovered that this...
EchoLeak Zero-Click Vulnerability in Microsoft 365 Copilot: Risks & Mitigation
A newly discovered zero-click vulnerability in Microsoft 365 Copilot, named EchoLeak, has sent shockwaves through the enterprise security community. Security researchers at Aim Labs uncovered this...
EchoLeak: The First Zero-Click AI Security Flaw and How Enterprises Can Stay Protected
The discovery of EchoLeak has sent shockwaves through the enterprise security landscape, exposing a critical vulnerability in generative AI systems that requires no user interaction to exploit. This...