CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower
Varonis Threat Labs uncovered another one-click vulnerability in Microsoft Copilot Personal dubbed CoSnitch (critical, CVE-2026-24301), which quietly executes an attack chain that exfiltrates data from enterprises without obvious red flags.
What makes CoSnitch unique is how Copilot surfaced its own vulnerabilities, a method we are calling meta-hacking. Our researchers didn't have to reverse-engineer the flaw. The AI exposed the weakness during normal use, highlighting a meaningful shift in how security flaws are found, and a preview of what's ahead as AI gets woven deeper into enterprise systems.
With AI copilots now at the center of enterprise environments, sensitive data shared via email, files, calendars, and chats is all accessible through a single assistant. CoSnitch shows that the path can move large volumes of sensitive data through a trusted AI workflow without tripping the alarms security teams normally rely on.
CoSnitch is the third Microsoft Copilot flaw Varonis Threat Labs...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE
