https://www.m365.fm/entity/echoleak/A zero-click prompt injection vulnerability in Microsoft 365 Copilot (CVE-2025-32711) in which a crafted email could cause Copilot to exfiltrate data; the episode describes it as an LLM scope violation.enhttps://www.m365.fm/community/u/mirko-p/blog/fixing-copilots-flaws-with-small-language-models/https://www.m365.fm/community/u/mirko-p/blog/fixing-copilots-flaws-with-small-language-models/Wed, 26 Aug 2026 09:51:45 -0000articleWelcome back to the podcast companion blog! In this post, we are diving deep into the technical shift transforming how enterprise organizations approach artificial …https://www.m365.fm/show/episodes/the-model-is-the-vulnerability-securing-copilot-with-entra-id-and-zero-trust/https://www.m365.fm/show/episodes/the-model-is-the-vulnerability-securing-copilot-with-entra-id-and-zero-trust/Sat, 30 May 2026 00:00:00 -0000episode"The Model Is the Vulnerability" explains that the biggest security risk in Microsoft Copilot is not the AI itself, but the data, identities, and permissions the model can access. Copilot amplifies existing security weaknesses by making enterprise information…https://www.m365.fm/community/u/mirko-p/blog/copilot-and-endpoint-security-requirements-the-ultimate-microsoft-365-guide/https://www.m365.fm/community/u/mirko-p/blog/copilot-and-endpoint-security-requirements-the-ultimate-microsoft-365-guide/Fri, 17 Apr 2026 12:58:49 -0000articleIf you’re thinking about launching Microsoft Copilot across your Microsoft 365 environment, you can’t afford to overlook endpoint security. This guide g…