{"id":242880,"date":"2026-08-19T05:20:10","date_gmt":"2026-08-19T10:20:10","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/08\/microsoft-copilot-personal-flaws-could-let-one-click-exfiltrate-data-from-connected-apps"},"modified":"2026-08-19T05:20:10","modified_gmt":"2026-08-19T10:20:10","slug":"microsoft-copilot-personal-flaws-could-let-one-click-exfiltrate-data-from-connected-apps","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/08\/microsoft-copilot-personal-flaws-could-let-one-click-exfiltrate-data-from-connected-apps","title":{"rendered":"Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/microsoft-copilot-personal-flaws-could-let-one-click-exfiltrate-data-from-connected-apps2.jpg\"><\/a><\/p>\n<p>CoSnitch is tracked as <strong><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-24301\" target=\"_blank\">CVE-2026\u201324301<\/a><\/strong> in Microsoft\u2019s Security Update Guide. The research names Copilot Personal, the consumer assistant hosted at <a href=\"http:\/\/copilot.microsoft.com\">copilot.microsoft.com<\/a>, and does not state that the same behavior affected Microsoft 365 Copilot.<\/p>\n<p>The researchers said they found no evidence that CoSnitch was exploited in the wild. They reached the parameter by repeatedly asking Copilot why a prompt could not be made to run without user interaction, an approach the firm calls meta-hacking. Each refusal carried a technical justification, and the assistant eventually named a parameter, autorun=1, along with the session conditions under which it worked and the protections that were supposed to have disabled it.<\/p>\n<p>When the researchers built the URL exactly as described, the parameter Copilot had said no longer worked executed. Copilot \u201cwasn\u2019t breached; it was played,\u201d Varonis <a href=\"https:\/\/www.varonis.com\/blog\/cosnitch\" target=\"_blank\">said in its report<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CoSnitch is tracked as CVE-2026\u201324301 in Microsoft\u2019s Security Update Guide. The research names Copilot Personal, the consumer assistant hosted at copilot.microsoft.com, and does not state that the same behavior affected Microsoft 365 Copilot. The researchers said they found no evidence that CoSnitch was exploited in the wild. They reached the parameter by repeatedly asking Copilot [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34],"tags":[],"class_list":["post-242880","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=242880"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242880\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=242880"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=242880"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=242880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}