Microsoft Patches Copilot Flaw That Let One Click Steal Gmail and Drive Data
Microsoft has patched a critical Copilot vulnerability (CVE-2026-24301, nicknamed CoSnitch) found by Varonis, which allowed attackers to silently steal victims' Gmail, Google Drive and calendar data with a single malicious link click.
2026-08-20 ~ 2026-08-20 · 2 related posts
- Episode 1: Researchers Trick Microsoft Copilot Into Revealing Its Own Exploits(2026-08-18, 3 posts)
- Episode 2: Microsoft Patches Copilot Flaw That Let One Click Steal Gmail and Drive Data(2026-08-20, 2 posts)
- Researchers tricked Copilot into leaking an undocumented parameter enabling one-click Gmail/Drive theft — heypearlai · 2026-08-20
- Microsoft patches critical Copilot flaw CoSnitch: one click siphons data from linked accounts — emmanuelvivier · 2026-08-20