Executive Summary
A review of 2025 AI agent incidents cites Black Hat demos by Zenity exploiting ChatGPT, Salesforce, Gemini and Copilot Studio, EchoLeak (CVE-2025-32711, CVSS 9.3) zero-click exfiltration in Copilot, Slack AI injection and a Drift chatbot compromise affecting 700+ organizations.
What Happened
A fact-checking review of 2025 AI agent security incidents cites Black Hat USA 2025 demos where Zenity Labs successfully exploited Copilot ChatG, Salesforce, and Google Gemini, including a crafted email that led ChatGPT to grant access to a connected Google Drive and Microsoft Copilot Studio leaking CRM databases.[11] It highlights CVE-2025-32711 (EchoLeak) in Microsoft Copilot, a CVSS 9.3 vulnerability where receiving a crafted email could trigger automatic data exfiltration, as well as indirect prompt injection in Slack’s AI assistant and multi-platform compromise via a Drift chatbot integration affecting over 700 organizations.[11]
Affected Products
- Microsoft Copilot
- OpenAI ChatGPT
- Salesforce
- Google Gemini
- Slack AI
- Drift
Vulnerability / Attack Technique
Prompt injection and integration compromise across platforms
Technical Mechanism
Crafted emails and content triggered assistants to grant access or exfiltrate data; a chatbot integration was used to reach many organizations.
AI Security Category
LLM01:2025 Prompt Injection
Part of the Prompt Injection topic.
Relevant Frameworks
RealGround Analysis
Integrations multiply blast radius: one chatbot reached 700 organizations. RealGround analysis: review third-party AI integrations' access to your systems.
Recommended Controls
- Audit third-party AI and chatbot integrations
- Apply Copilot EchoLeak fixes
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
Reddit / r/cybersecurity (incident roundup): https://www.reddit.com/r/cybersecurity/comments/1r79rye/i_went_through_every-ai-agent-security-incident
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.