> TritonInfoSec News
Home / Aug 19, 2026 / Story
0
#1 The Hacker News general August 18, 2026 at 17:47 UTC

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

By [email protected] (The Hacker News)

AI Summary

Varonis Threat Labs disclosed three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, that allow a single crafted link click to silently exfiltrate data from connected apps available in the victim's Copilot session. The attack leverages an undocumented URL parameter that Copilot itself revealed during researcher interaction. Security practitioners using Microsoft 365 integrations should audit Copilot permissions and connected app access immediately.

Read full article → https://thehackernews.com/2026/08/microsoft-copilo…

Relevance score: 88.0/100

# More from August 19

  1. 2
    Clop created custom web shell for Windchill data theft attacks BleepingComputer
  2. 3
    Philips and GE investigating Clop ransomware data theft claims BleepingComputer
  3. 4
    More than 200 victims of Medusa ransomware identified over the last year, CISA says The Record
  4. 5
    Critical GitLab Zero-Click Flaw Poses Mitigation Challenges Dark Reading
  5. 6
    Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access The Hacker News
  6. 7
    SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch The Hacker News
  7. 8
    TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks The Hacker News
  8. 9
    CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE The Hacker News
  9. 10
    Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware The Hacker News