Danielle-Respes/Threat-Hunt-EchoLeak-Copilot-Prompt-Injection-Sentinel-KQL-Oct-2026

PoC

Threat hunt reconstructing an M365 Copilot indirect prompt injection (CVE-2025-32711 "EchoLeak"): poisoned email attachment, Graph API data collection, markdown-image exfiltration, and system prompt leakage. Sentinel + KQL across Office, Copilot and Entra telemetry. 17/17 flags.

view exploit source poc_in_githubauthor Danielle-Respespublished 2026-10-18catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-32711UShigh7.5Exploit
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan