PulseAugur
EN
LIVE 11:10:29

Microsoft Copilot Personal Vulnerabilities Disclosed by Varonis

By PulseAugur Editorial · [2 sources] ·

Varonis Threat Labs has identified three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch. One critical flaw, CVE-2026-24301, allows for data exfiltration through a single click on a specially crafted link. Uniquely, the vulnerability was exposed by Copilot itself during normal use, a phenomenon Varonis terms "MetaHacking," signaling a new era in AI-assisted security flaw discovery. AI

IMPACT Highlights potential security risks as AI tools become more integrated into enterprise systems, necessitating new approaches to vulnerability discovery and mitigation.

RANK_REASON Disclosure of vulnerabilities in a widely used AI product.

Read on Mastodon — fosstodon.org →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

Microsoft Copilot Personal Vulnerabilities Disclosed by Varonis

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Disclosure of vulnerabilities in a widely used AI product.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
50 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [2]

  1. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    “Varonis Threat Labs uncovered another one-click vulnerability in # Microsoft # Copilot Personal dubbed # CoSnitch (critical, CVE-2026-24301), which quietly exe

    “Varonis Threat Labs uncovered another one-click vulnerability in # Microsoft # Copilot Personal dubbed # CoSnitch (critical, CVE-2026-24301), which quietly executes an attack chain that exfiltrates data from enterprises without obvious red flags. What makes CoSnitch unique is ho…

    LINKS varonis.com/…/cosnitch theregister.com/…/5288857
  2. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    🤖 CoSnitch: Varonis disclosed 3 flaws in Microsoft Copilot Personal, incl. an undocumented URL parameter. One click on a crafted link can silently pull data fro

    🤖 CoSnitch: Varonis disclosed 3 flaws in Microsoft Copilot Personal, incl. an undocumented URL parameter. One click on a crafted link can silently pull data from connected apps. 🔗 https:// thehackernews.com/2026/08/micr osoft-copilot-personal-flaws-could.html # AI # CyberSec # In…

    LINKS thehackernews.com/…/microsoft-copilot-per… thehackernews.com/…/micr

RELATED ENTITIES

RELATED TOPICS