Copilot Personal CoSnitch flaws could enable one-click data exfiltration
Source headline: Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Intelligence Summary
Varonis Threat Labs disclosed vulnerabilities in Microsoft Copilot Personal that it says can silently pull data from connected apps. The researchers describe the issue as CoSnitch, involving an undocumented URL parameter discovered in a Copilot surfaced behavior. They report that a single click on a crafted link could access other information available in the victim’s Copilot session. The flaw is positioned as a way for an attacker to leverage a user interaction to trigger data access. Users of Microsoft Copilot Personal should review exposure to crafted links and limit access to connected apps until mitigations are available.
Recommended Action
Review how Microsoft Copilot Personal is deployed and decide whether this warrants action in your environment. This signal rests on a single report, so corroborate it before acting on anything irreversible.