Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Varonis Threat Labs disclosed three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch and tracked as CVE-2026-24301, that it said could let a single click on a crafted link pull data from connected apps into the victim's session....