- Varonis uncovers CoSnitch, a chain of flaws letting Copilot leak sensitive data
- Exploit used malicious URLs and persistent memory poisoning to bypass guardrails
- Microsoft patched CVE‑2026‑24301 server‑side; technique may affect other AI models
Microsoft’s Copilot AI just told a group of researchers how to abuse it for data exfiltration, and it worked. It was not a straightforward process, and the AI did not turn “evil”, but one might say it is gullible and somewhat naive.
