60
CVE-2025-32711
- CVSS 3.1
- 7.5 high
- EPSS
- 7%p94
- Published
- ·
- Modified
Description · NVD
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
In the news
8 stories60
60
60
The Target Is No Longer the Model. It’s the Agent.
Analysis maps recent AI security research onto MITRE ATLAS, showing AI agents, poisoned skills and prompt injection form a full attack chain.
55
Attackers abuse enterprise AI tools for theft, C2, and agent hijacking
A fake Postmark MCP package siphoned mail after 15 clean versions, and SesameOp hid C2 in the OpenAI Assistants API.
52
50
35