A critical one-click vulnerability in Microsoft Copilot Personal, tracked as CVE-2026-24301 and dubbed CoSnitch. This flaw could enable an attacker to trigger malicious Copilot prompts, access data from connected OAuth applications, and silently transmit that information to an attacker-controlled server. Microsoft addressed this issue on August 18, 2026, following Varonis’s responsible disclosure in December 2025. […]
The post Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.