SearchLeak CVE-2026-42824 Copilot Bing SSRF Exfiltration via Crafted Search URL

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects anomalous network traffic patterns indicative of two distinct techniques: P2P injection into Microsoft 365 Copilot search queries and Server-Side Request Forgery (SSRF) leveraging Bing's image search functionality for data exfiltration.