Cybercriminals exploit Microsoft Copilot for SharePoint to steal passwords
Cybersecurity researchers and Pen Test Partners have identified vulnerabilities in Microsoft Copilot for SharePoint that allow attackers to exploit AI agents to access sensitive corporate data including passwords and API keys. The vulnerabilities enable criminals to bypass security controls while evading detection.
What happened
Attackers are exploiting vulnerabilities in Microsoft's Copilot for SharePoint to bypass security controls, extract passwords, and access restricted files while evading detection.
Pen Test Partners investigations revealed that attackers can leverage SharePoint Agents to access sensitive corporate data including passwords, API keys, and confidential documents.
Reported impact
Attackers can access passwords, API keys, and confidential documents through SharePoint Agents.
Index analysis
The vulnerabilities enable cybercriminals to exploit AI assistants embedded in SharePoint sites to target organizational secrets and enterprise data.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.