Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.
Researchers found 152 Chrome extensions with 105,000 installs tied to adware, data collection, and fake Google organic traffic.