AIThe Hacker Newsabout 2 hours ago
Copilot Personal Flaws Enable One-Click Data Exfiltration
1 min read
Varonis Threat Labs disclosed CoSnitch, three vulnerabilities in Microsoft Copilot Personal allowing one-click data exfiltration via an undocumented autorun=1 parameter. Patches shipped August 18, 2026, tracked as CVE-2026-24301. The attack also enables persistent memory poisoning through web summarization, with no evidence of in-the-wild exploitation.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
