Threat Group – Unknown / Opportunistic Threat Actors
Threat Type – Information Disclosure Vulnerability
Exploited Vulnerabilities – CVE-2026-26144
Malware Used – None required (AI-assisted data exfiltration via Copilot Agent)
Threat Score – 7.2 🔴 High – The vulnerability enables zero interaction data leakage through an automated AI agent integrated into Microsoft Office. The flaw can be triggered