Microsoft 365 Copilot SearchLeak Patched

CVE-2026-42824 in M365 Copilot could have exposed emails, files, calendars, and MFA codes through a trusted link. Microsoft mitigated it server-side; defenders should audit Copilot data access and overshared content.