Microsoft Copilot Personal CoSnitch Flaws Enable One-Click Data Exfiltration

Wed, 19 Aug 2026 11:36:35 +0000

Engineer — Learn: No enrichment signals and no patch details are provided, but the CoSnitch research illustrates how undocumented AI assistant parameters can become exfiltration channels — worth factoring into security reviews of any AI integrations or OAuth-connected app architectures you own.
SOC/IR — Learn: No IOCs, no active exploitation, and no detection artifacts are available; the one-click-via-crafted-link technique is worth noting for future phishing-via-AI-assistant scenarios, but there is nothing actionable to hunt or detect today.
Leader — Plan: Employees who connect corporate accounts or data to personal Microsoft Copilot sessions may be exposed to this exfiltration path — assess whether current acceptable-use or CASB policies cover personal AI assistant tools and extend them if not.

Microsoft-Copilot on CuraSec