EchoLeak marks the first known zero-click attack on an AI agent (via Fortune). The cybersecurity firm presented its findings to Microsoft earlier this year in January.

The “EchoLeak,” as the security flaw is known, is the first known AI security vulnerability that doesn’t require users to click a link to become infected.

Cybercriminals are abusing the link wrapping security feature from Proofpoint and Intermedia to launch sophisticated phishing ...