Tag: cve 2026 24301

Microsoft Copilot Flaws Expose One-Click Data Exfiltration Risk

Researchers uncovered a set of flaws in Microsoft Copilot, dubbed CoSnitch, that could allow attackers to exploit a user's session with just one click, potentially leading to data exfiltration. A single crafted link could trigger actions inside a signed-in user's assistant session, putting sensitive information at risk.