Data Exfiltration: articles and guides

Teardown of EchoLeak (CVE-2025-32711): the four-bypass Copilot email chain, Microsoft's server-side fix, and what to check in your AI assistants.

A clear explainer on hidden and anonymous proxy servers: what they are, how attackers and insiders use them to evade security controls, the data-exfiltration and command-and-control risks they create, and the egress filtering and detection techniques that surface them.

From RovoBlast to EchoLeak — a single click can now turn your enterprise AI assistant into a data exfiltration tool. Here is how the attacks work, a timeline of every known incident, and what security leaders should do about it.