SearchLeak P2P Injection: Copilot Search URL with Encoded Prompt Payload

Ibrahim Saud@tektrix

•updated Jun 30, 2026•2•0•10

Detects malicious Parameter-to-Prompt (P2P) injection attempts targeting Microsoft 365 Copilot by monitoring search query parameters for indicators of natural-language command injection or HTML-based payload injection (e.g., img tags, source manipulation, or data extraction commands).