The Hacker News
August 18, 2026
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
CVE-2026-24301 lets crafted Copilot Personal links auto-run prompts that can pull data from connected apps and exfiltrate it via URL fetches.
Advertisement
Advertisement