{"uuid": "eb59327a-9f84-413a-8a9d-d3bc828d1a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42824", "type": "seen", "source": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3moeeg4yq3s27", "content": "\u203c\ufe0f\ud83d\udea8 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required.\n\nCVE-2026-42824-&gt;critical.", "creation_timestamp": "2026-06-15T22:46:20.153685Z"}