#copilot

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

Aug 18, 2026 // 23:28

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently […]

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Jul 30, 2026 // 15:19

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. […]

GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code

Jul 8, 2026 // 15:02

An AI coding assistant that refuses to answer a dangerous request in its chat box can answer it anyway if the same request is broken […]

New attack turned Microsoft 365 Copilot into 1-click data theft tool

Jun 15, 2026 // 22:57

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target’s mailbox, OneDrive, or SharePoint […]

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

Jun 15, 2026 // 22:49

A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot […]

RoguePilot Exploit: How GitHub Codespaces Flaw Let Copilot Leak Tokens

Feb 24, 2026 // 23:36

The RoguePilot flaw was a critical AI-driven vulnerability in GitHub Codespaces (discovered by Orca Security) that allowed attackers to perform a full repository takeover by exploiting GitHub Copilot. The attack chain […]