A critical vulnerability in Microsoft Copilot Personal, tracked as CVE-2026-24301 and nicknamed CoSnitch, lets attackers silently siphon sensitive data from a victim’s connected accounts with nothing more than a single click on a malicious link. The flaw discovered by Varonis Threat Labs has already been patched by Microsoft as of August 18, 2026, but the […]
The post Critical Microsoft Copilot CoSnitch Vulnerability Lets Attackers Steal Sensitive Data With One Click appeared first on Cyber Security News.