Affected Technology
Microsoft Copilot incidents
Microsoft Copilot security
Microsoft Copilot Remote Code Execution Vulnerability
Millions of AI agents imperiled by critical vulnerability in open source package Ars Technica
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit The Hacker News
Microsoft Copilot Security Vulnerability
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim's Copilot session. The flaws, which the researchers collectively named CoSnitch, turn in part on an undocumented URL parameter that the assistant itself surfaced
AI Prompt Injection Vulnerability
Microsoft Copilot inadvertently revealed its secret input prompts, creating a critical information disclosure vulnerability. This prompt leakage allowed adversaries to exploit the AI model's underlying configuration, compromising its intended behavior.