Uploaded June 2026 | Updated September 2026, 1 hour ago

---

with the help of the 100% trusted Microsoft Bing
pivot-to-ai.com/2026/06/17/searchleak-prompt-inject-enterprise-copilot-with-a-search - blog post

Patreon: patreon.com/davidgerard
Ko-Fi: ko-fi.com/A1529D5
Buy us nice useful things (if not in the UK, set the delivery postcode to SW1A 0AA): amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6
Get an extremely cool Pivot to AI shirt or mug: pivot-to-ai.redbubble.com

Send in your story tips: dgerard@gmail.com

Sources:

SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon varonis.com/blog/searchleak
M365 Copilot Information Disclosure Vulnerability msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42824

Previously on Pivot to AI:

How to hack Microsoft Copilot AI: ask it twice pivot-to-ai.com/2026/01/20/how-to-hack-microsoft-copilot-ai-ask-it-twice
video: youtube.com/watch?v=yhpt0cJLlHM&list=UU9rJrMVgcXTfa8xuMnbhAEA

Full Pivot to AI playlist: youtube.com/playlist?list=UU9rJrMVgcXTfa8xuMnbhAEA

Audio-only podcast: pivottoai.libsyn.com
Apple Podcasts: podcasts.apple.com/us/podcast/pivot-to-ai/id1844698298