Fetching from the wire…
Security2026-03-19 · source-backed
Microsoft's March 2026 Patch Tuesday (79 flaws, 2 zero-days) includes a Critical vulnerability where Excel's Copilot Agent mode silently exfiltrates data with zero user interaction. An attacker crafts a malicious document; when opened, the Copilot Agent triggers network egress leaking PII or credentials without victim action. Patch immediately. The zero-click nature makes this the highest-urgency finding for any organization running Microsoft 365 Copilot. BleepingComputer
Each link below shares sources, entities, or timing with this story.
Microsoft released Copilot / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released Copilot); both cover BleepingComputer, Copilot, Critical, CVE; reported by the same outlet (bleepingcomputer.com).
Linked by a graph relationship (Microsoft released Copilot); both cover BleepingComputer, Copilot, Microsoft; reported by the same outlet (bleepingcomputer.com).
Copilot uses Claude / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Copilot uses Claude); both cover Copilot, Excel, Microsoft; overlapping topics (agent, copilot, data, excel).
Microsoft released Copilot / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Copilot); both cover Copilot, March, Microsoft; overlapping topics (agent, copilot, microsoft).
Copilot uses Claude / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Copilot uses Claude); both cover BleepingComputer, CVE; reported by the same outlet (bleepingcomputer.com).
Microsoft released Copilot / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Copilot); both cover Copilot, March, Microsoft; overlapping topics (agent, copilot).
Linked by a graph relationship (Microsoft released Copilot); both cover Copilot, Excel, Microsoft; overlapping topics (copilot, microsoft).
Copilot uses GPT / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Copilot uses GPT); both cover CVE, Microsoft; overlapping topics (agent, data, microsoft).