Copilot tricked into telling reseachers how to hack itself
Researchers manipulated Microsoft Copilot Personal into telling them how to hack the AI assistant – eventually tricking it into sending sensitive data to an external server and poisoning its persistent memory, by repeatedly asking Copilot why an attack wouldn’t work.
Varonis Threat Labs uncovered the vulnerability, which they named "CoSnitch" and reported to Microsoft in December 2025. Redmond, we’re told, planned to issue a patch and formally identify the CVE on Tuesday.
In research shared in advance with The Register, Varonis detailed the security flaw and the technique they used to exploit it, which they call “meta-hacking.” This involves social engineering the AI’s reasoning engine, and manipulating it into disclosing things it shouldn’t.
“What makes CoSnitch unique is how Copilot surfaced its own vulnerabilities,” the threat hunters wrote. “Our researchers didn't have to reverse-engineer the flaw. The AI exposed the weakness during normal use.”
The issue goes back to ?q=,...
Copyright of this story solely belongs to theregister.com. To see the full text click HERE
