SearchLeak One-Click Copilot Exfil via Crafted m365.cloud.microsoft/search/?q= URL

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•3

Detects HTTP requests to Microsoft 365 search endpoints containing unusually long query strings. Such patterns may indicate automated data extraction, exfiltration over alternative protocols, or unauthorized information harvesting via search parameters.