Sev0

AI security incidents, tracked

All incidents / Microsoft

Microsoft AI security incidents

2 security incidents involving Microsoft's AI since January 2025, including 0 where an agent acted on its own. The model was judged at fault in 2. Involvement does not mean Microsoft was responsible.

6 Oct 2026Adversa showed an encrypted web page could make Copilot CLI send out a .env file
GitHub
Manipulated AILow
Jun 2025EchoLeak: zero-click prompt injection could make Microsoft 365 Copilot leak data
Microsoft
Manipulated AILow