Copilot Hack: Leaked URL Parameter Allowed Autorun Attacks
jonerp · x · 2026-08-24
Varonis discovered a vulnerability in Microsoft Copilot where the AI leaked an undocumented URL parameter while refusing to answer a security question. This parameter revealed historical behavior and protections. By adding "autorun=1" to a link, attackers could execute prompts without user interaction, potentially exfiltrating company data. The vulnerability was reported in December and remained exploitable for eight months before Microsoft patched it.
More from Safety
- Europe and America's Divergent AI Strategies: Regulation vs. Speed to Counter China — VraserX · 2026-08-24
- Is Anthropic irresponsible for keeping short timeline evidence private? — YafahEdelman · 2026-08-24
- UChicago Sosc Core to ban AI and enforce technology-free classrooms — RexDouglass · 2026-08-24
- LLM diagnostic accuracy drops 60% when communicating with patients — peterwildeford · 2026-08-24
- Secret Injection Cheatsheet: 6 Rules to Prevent AI Agent Leaks — blaizedsouza · 2026-08-24
- AI use implodes big book deals, forcing publishing industry reckoning — TuhinChakr · 2026-08-24