SearchLeak Copilot Race Condition - Bing SSRF Exfil via img src Injection

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•5

This rule detects outbound HTTP requests to Bing's 'searchbyimage' functionality that contain an image URL pointing to a domain outside of Microsoft or Bing. This behavior is associated with a potential data exfiltration technique (referenced as CVE-2026-42824) where internal information is encoded into an image URL and passed to an external, attacker-controlled, or third-party web service via the Bing search engine to bypass traditional network egress controls.