Microsoft's search engine. Its 'Search by Image' endpoint was exploited as an exfiltration proxy in the SearchLeak attack due to CSP allowlisting.
Discovered from: One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes