Researchers Trick Microsoft Copilot Into Revealing Its Own Exploits
Varonis researchers exploited the "CoSnitch" flaw (CVE-2026-24301) in Microsoft 365 Copilot by prompting it to reveal its own security controls and secret parameters, enabling theft of enterprise data and highlighting AI assistants' vulnerability to adversarial attacks.
2026-08-18 ~ 2026-08-19 · 3 related posts
- Episode 1: Researchers Trick Microsoft Copilot Into Revealing Its Own Exploits(2026-08-18, 3 posts)
- Episode 2: Microsoft Patches Copilot Flaw That Let One Click Steal Data(2026-08-20, 3 posts)
- Episode 3: Researchers demo CSP-bypass attack chain stealing data from Copilot(2026-08-24, 2 posts)
- Microsoft Copilot Leak Reveals Hack to Bypass User Confirmation — luisdans · 2026-08-18
- Researchers Trick Copilot into Revealing How to Hack Itself — homothebrave · 2026-08-19
- Researchers trick Microsoft Copilot into exposing its own one-click data exfiltration flaw — mkheck · 2026-08-19