Experts manage to hack Microsoft Copilot by continually asking it questions about itself
- Varonis uncovers CoSnitch, a chain of flaws letting Copilot leak sensitive data
- Exploit used malicious URLs and persistent memory poisoning to bypass guardrails
- Microsoft patched CVE‑2026‑24301 server‑side; technique may affect other AI models
Microsoft’s Copilot AI just told a group of researchers how to abuse it for data exfiltration, and it worked. It was not a straightforward process, and the AI did not turn “evil”, but one might say it is gullible and somewhat naive.
Security firm Varonis has published a new report outlining its discovery of a vulnerability in Copilot they named CoSnitch.
The name is a major hint at what the vulnerability is - as CoSnitch is a chain of three vulnerabilities which Microsoft later labeled as CVE-2026-24301, giving it a severity score of 8.8/10 (high), and fixing it with a patch.
You can’t trick me, and I’ll tell you exactly why
Cybercriminals have long been...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
