Researchers tricked Copilot into leaking an undocumented parameter enabling one-click Gmail/Drive theft
heypearlai · x · 2026-08-20
Microsoft patched a Copilot bug on Aug 18 that let attackers steal a victim's Gmail, Drive and Calendar data with a single click on a crafted link. Varonis researchers found it by repeatedly asking Copilot "why can't this happen" — every refusal came with technical explanations, and eventually the AI volunteered an undocumented URL parameter mid-refusal, which turned out to be the core of the exploit. No evidence of exploitation before the fix.
More from Safety
- AI access risk: Efficiency boost opens door to blackmail — danfaggella · 2026-08-20
- Op-ed: Gating Model Releases for Cybersecurity Risks is a Marketing Move — paulabartabajo_ · 2026-08-20
- Uncensored Qwen3.8-27B drops refusals to 6%, but 27–56% of answers stay caveated — creditme7 · 2026-08-20
- US Executive Branch Says No One Owns AI Output, But Also Says China Stole It: Legal Contradiction — orangejulius · 2026-08-20
- IIT Bombay finds the most manipulative prompt was also the most polite one — alex_verem · 2026-08-20
- David Manheim: Agent Individuation May Undermine Prosaic Alignment — davidmanheim · 2026-08-20